Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
gokrb5
A pure Go implementation of Kerberos 5 authentication, SPNEGO negotiation, and Active Directory PAC decoding — no cgo, no native krb5 dependency.
jws
Complete JSON Web Signature (JWS) implementation for Node.js with sync and streaming APIs
node-jose
A JavaScript implementation of JOSE (JWS, JWE, JWK, JWA) for Node.js and browsers
zxcvbn-python
A Python port of Dropbox's zxcvbn - realistic password strength estimation with crack-time estimates and specific improvement feedback.
argon2id
A minimal, secure Argon2id password hashing wrapper for Go with built-in salt generation and constant-time verification.
node-auth0
Official Node.js client library for the Auth0 identity platform's Authentication and Management APIs.
openidconnect-rs
A strongly-typed, extensible Rust implementation of the OpenID Connect protocol for building relying-party authentication and OIDC provider integrations.
SocialiteProviders: Google
Google OAuth2 provider for Laravel Socialite, part of the community SocialiteProviders collection
Regorus
A fast, lightweight Rego (OPA policy language) interpreter written in Rust.
cookie
HTTP cookie parsing and cookie jar management for Rust
Laragear TwoFactor
On-premises TOTP two-factor authentication for Laravel users
@badgateway/oauth2-client
Dependency-free OAuth2 client for Node.js and browsers with PKCE and token refresh
totp-generator
Generate TOTP one-time passcodes from a secret key using the native Web Crypto API, with a pure-JS fallback.
requests-kerberos
Kerberos and GSSAPI authentication support for Python Requests
ldap3
A pure-Rust LDAP client built on Tokio, with matching sync and async APIs, TLS, and SASL GSSAPI/NTLM auth.
node-appwrite
Official Node.js server SDK for Appwrite's open-source backend-as-a-service platform, covering auth, databases, storage, and functions.
Guzzle OAuth Subscriber
Guzzle middleware that signs outgoing HTTP requests using the OAuth 1.0 protocol.
HTTPX OAuth
Async OAuth2 client for Python built on HTTPX with ready-made provider clients.
joserfc
A comprehensive Python implementation of the JOSE RFCs — JWS, JWE, JWK, JWA, and JWT — with a strict, extensible, security-first API.
pwdlib
Modern password hashing for Python with Argon2 and bcrypt and a simple hash and verify API.
@aparajita/capacitor-secure-storage
Encrypted key-value storage for Capacitor apps, backed by the iOS Keychain and Android Keystore.
Guzzle OAuth2 Subscriber
OAuth 2.0 client for Guzzle that acquires, refreshes, and applies access tokens automatically.
python-gssapi
Python bindings for RFC 2743/2744 GSSAPI, giving Python code direct, Pythonic access to Kerberos and other GSSAPI security mechanisms.
oci-common
The shared authentication, request-signing, retry, and HTTP runtime underlying every Oracle Cloud Infrastructure Node.js service SDK.
