Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
hawk
JavaScript implementation of the Hawk HTTP holder-of-key authentication scheme
django-two-factor-auth
Complete two-factor authentication for Django, adding TOTP, SMS/call, email, WebAuthn, and YubiKey verification on top of django-otp.
dj-rest-auth
Secure drop-in authentication endpoints for Django REST Framework.
Symfony Security HTTP
HTTP-layer integration for Symfony Security: firewalls, authenticators, login flows, and access control.
react-native-apple-authentication
A well-typed React Native library that brings native Sign In with Apple to iOS and a web-based equivalent to Android.
disposable-email-domains
A community-maintained JSON list of 120,000+ known disposable email domains for filtering throwaway signups.
PHP SAML Toolkit
Add SAML 2.0 single sign-on support to PHP applications as a service provider.
firebase-admin-python
Google's official Python SDK for privileged server-side access to Firebase Auth, Firestore, Cloud Messaging, Storage, and Remote Config.
axios-auth-refresh
Automatically refresh expired auth tokens and retry failed requests with Axios interceptors.
FOSOAuthServerBundle
Turn a Symfony application into a server-side OAuth2 authorization server
auth0-spa-js
Auth0's official SDK for adding PKCE-based login, token management, MFA, and passkeys to single-page applications.
bjeavons/zxcvbn-php
Realistic PHP password strength estimation via pattern matching and entropy
jwt-auth (PHP Open Source Saver)
Actively maintained JSON Web Token authentication for Laravel and Lumen APIs.
oauth2client
Google's deprecated Python client library for OAuth 2.0 authentication against Google APIs and services.
djangorestframework-api-key
API key permissions for Django REST Framework, with secure hashing and admin-managed keys.
webauthn-rs
A Rust implementation of the WebAuthn Relying Party protocol for passkey and passwordless authentication.
notp
Zero-dependency Node.js library for generating and verifying HOTP and TOTP one-time passwords compatible with Google Authenticator.
django-otp
A pluggable framework for adding two-factor authentication to Django using one-time passwords.
webauthn
Small, lightweight PHP WebAuthn (FIDO2/Passkey) server library for passwordless login.
@fastify/jwt
JWT authentication plugin for Fastify, decorating routes with sign, verify, and decode utilities built on fast-jwt.
LdapRecord
A fully-featured, ActiveRecord-style LDAP ORM for PHP supporting Active Directory, OpenLDAP, and FreeIPA.
mozilla-django-oidc
OpenID Connect authentication for Django, with a pluggable auth backend, callback views, and silent session refresh.
express-openid-connect
Auth0's Express.js middleware for adding OpenID Connect login and session protection to web apps.
okta-auth-js
The official JavaScript SDK for Okta's Authentication and OIDC APIs, handling tokens, sessions, and sign-in flows for web and Node apps.
