Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
PragmaRX Recovery
Generates two-factor auth recovery/backup codes with configurable count, format, and casing.
scheb/2fa-bundle
A generic interface to add two-factor authentication to Symfony applications.
SuperTokens Web JS SDK
Vanilla JavaScript frontend SDK for adding SuperTokens authentication to any web app.
pyspnego
SPNEGO, NTLM, Kerberos, and CredSSP authentication for Python, with native SSPI/GSSAPI wrapping and a raw-token debug parser.
Microsoft Azure (Socialite Provider)
Laravel Socialite OAuth2 driver for signing users in with Microsoft Azure AD / Entra ID, with multi-tenant config and logout support.
Microsoft
Microsoft OAuth2 login provider for Laravel Socialite
@octokit/webhooks-methods
Sign and verify GitHub webhook payload signatures with constant-time HMAC comparison, in Node.js and the browser.
scheb/2fa-backup-code
Backup code support for Symfony two-factor authentication via scheb/2fa-bundle.
@octokit/auth-oauth-device
GitHub OAuth Device Flow authentication strategy for Octokit-based JavaScript apps.
laminas-ldap
A PHP library for binding, searching, and modifying entries in an LDAP directory.
Authentik Socialite Provider
Authentik OAuth2 provider that adds Authentik single sign-on to Laravel Socialite.
JWT Auth for Laravel
JSON Web Token authentication for Laravel and Lumen APIs, with token issuing, refresh and blacklisting.
wagmi
Reactive React Hooks for building Ethereum and Web3 applications, built on viem and TanStack Query.
Flask-AppBuilder
A rapid-application-development framework on Flask with automatic CRUD, REST APIs, and fine-grained role-based security.
django-guardian
Per-object (row-level) permissions for the Django authorization system.
Kiota Authentication Azure
Azure Identity-backed authentication provider for Python API clients generated by Microsoft Kiota.
react-native-keychain
Secure, cross-platform credential storage for React Native apps using native Keychain and Keystore.
FOSUserBundle
Database-backed user management (registration, password reset, profiles) for Symfony applications
Djoser
Ready-made Django REST Framework views for registration, login, password reset, and account management.
nookies
A lightweight set of cookie helpers for parsing, setting, and destroying cookies in Next.js apps, on both server and client.
Laravel Impersonate
A Laravel package that lets administrators authenticate as their users and impersonate accounts in one click.
accesscontrol
Role- and attribute-based access control (RBAC + ABAC) for Node.js, with enforced ownership, conditions, and require() gates.
Laratrust
Flexible role-based access control (RBAC) for Laravel with roles, permissions, teams, and caching
django-rules
Object-level permissions and rule-based authorization for Django, with no database required.
