Authentication & Authorization Packages
Authentication, authorization, and identity/session libraries for handling login, permissions, and access control securely (JWT, Passport, Sanctum).
Packages in Authentication & Authorization
Kind
Sort:Used by Most Apps
jsonwebtoken
The de facto Node.js library for signing, verifying, and decoding JSON Web Tokens.
jose
Zero-dependency JWT, JWS, JWE, and JWK toolkit for Node.js, browsers, and edge runtimes.
jwt
A zero-dependency Go implementation of JSON Web Tokens (JWT) with pluggable HMAC, RSA, RSA-PSS, ECDSA, and Ed25519 signing methods.
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
NextAuth.js
Open-source authentication for Next.js with OAuth, OIDC, email, and passkey sign-in.
jwt-decode
A lightweight TypeScript library for decoding JSON Web Token payloads and headers in the browser and Node.js.
openid-client
Certified OAuth 2 and OpenID Connect client for every modern JavaScript runtime.
node-jwks-rsa
A Node.js library that retrieves RSA, EC, and OKP signing keys from a JWKS endpoint, with caching and rate limiting built in.
jsonwebtoken
Create and decode JSON Web Tokens in Rust in a strongly typed way
@nestjs/jwt
Official NestJS module for signing, verifying, and decoding JWTs
Authlib
The ultimate Python library for building OAuth 1/2 and OpenID Connect clients and servers.
@clerk/backend
The official JavaScript SDK for Clerk's Backend API and JWT session verification.
jwx
A complete, opinionated Go implementation of the JOSE stack: JWT, JWS, JWE, JWK, and JWA.
oidc
OpenID Connect (OIDC) and OAuth2 client and server library for Go, certified by the OpenID Foundation.
Firebase php-jwt
A simple PHP library to encode and decode JSON Web Tokens conforming to the JWT spec.
lcobucci/jwt
A simple, RFC 7519-compliant PHP library for creating, signing, and validating JSON Web Tokens
node-auth0
Official Node.js client library for the Auth0 identity platform's Authentication and Management APIs.
joserfc
A comprehensive Python implementation of the JOSE RFCs — JWS, JWE, JWK, JWA, and JWT — with a strict, extensible, security-first API.
JWT Auth for Laravel
JSON Web Token authentication for Laravel and Lumen APIs, with token issuing, refresh and blacklisting.
dj-rest-auth
Secure drop-in authentication endpoints for Django REST Framework.
jwt-auth (PHP Open Source Saver)
Actively maintained JSON Web Token authentication for Laravel and Lumen APIs.
@fastify/jwt
JWT authentication plugin for Fastify, decorating routes with sign, verify, and decode utilities built on fast-jwt.
php-jwt
Ultra-lightweight, dependency-free JSON Web Token (JWT) library for PHP 7 and 8.
jwt-simple
A fast, safe-by-default Rust library for creating and verifying JWT and JWE tokens across every major signing and encryption algorithm.
