Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
passport-http
HTTP Basic and Digest authentication strategies for Passport.js and Node.js
ssh-key
A pure Rust implementation of SSH key, certificate, and signature file formats.
passport-discord
A Passport.js OAuth2 strategy for authenticating users with Discord accounts.
react-turnstile
A minimal React component and hook for rendering Cloudflare Turnstile CAPTCHA challenges.
node-saml
A framework-agnostic SAML 2.0 authentication library for Node.js, handling AuthnRequest/Response generation, XML signature validation, and single logout.
passport-microsoft
A Passport.js strategy for authenticating users with Microsoft Graph via OAuth 2.0
scim-patch
TypeScript library that validates and applies RFC 7644 SCIM PATCH operations to user and group resources.
hapi
A config-driven Node.js framework for building HTTP APIs and web servers with built-in validation, caching, and auth.
Firebase php-jwt
A simple PHP library to encode and decode JSON Web Tokens conforming to the JWT spec.
AT Protocol API (@atproto/api)
The official TypeScript client for AT Protocol and Bluesky, with session management, OAuth, moderation, and RichText handling built in.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
iron-session
Secure, stateless, cookie-based session library for Next.js and any JavaScript framework
Bouncer
Elegant roles and abilities authorization for Laravel using Eloquent.
Laravel Passport
Full OAuth2 server and API authentication for Laravel, ready in minutes.
django-oauth-toolkit
Turns any Django project into a spec-compliant OAuth 2.0 and OpenID Connect authorization server.
supabase-py
The official Python client for Supabase, wrapping Postgres, Auth, Storage, Edge Functions, and Realtime in one typed SDK.
Social Auth App Django
Django integration for python-social-auth, adding social login and registration to Django projects
workers-oauth-provider
OAuth 2.1 authorization provider for Cloudflare Workers and remote MCP servers, with built-in CIMD support.
Symfony Security Core
Infrastructure for authentication and sophisticated authorization, decoupled from user credential storage.
Symfony Security CSRF
Generate and validate CSRF tokens to protect PHP applications against cross-site request forgery.
django-axes
Track failed login attempts and lock out brute-force attackers on Django-powered sites.
sessions
Gin middleware for session management with pluggable cookie, Redis, Memcached, MongoDB, GORM, and PostgreSQL backends.
OTPHP
A PHP library for generating TOTP and HOTP one-time passwords per RFC 4226 and RFC 6238
MSAL Python
Official Microsoft Authentication Library for Python, for Microsoft Entra ID sign-in and token acquisition
