Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.

If you want to quickly add authentication to JavaScript apps, feel free to check out Auth0's JavaScript SDK and free plan. Create an Auth0 account; it's free!

A collection of examples for the most common use cases.

• Authorization Code Flow (OAuth 2.0) - source
• Authorization Code Flow (OpenID Connect) - source | diff
• Extensions
  • DPoP - source | diff
  • JWT Secured Authorization Request (JAR) - source | diff
  • JWT Secured Authorization Response Mode (JARM) - source | diff
  • Pushed Authorization Request (PAR) - source | diff
• Client Authentication
  • Client Secret in HTTP Body - source
  • Client Secret in HTTP Authorization Header - source | diff
  • Private Key JWT Client Authentication - source | diff
  • Public Client - source | diff
• Other Grants
  • Client Credentials Grant - source
  • Client-Initiated Backchannel Authentication Grant (CIBA) - source
  • Device Authorization Grant - source
  • Refresh Token Grant - source | diff
• FAPI
  • FAPI 1.0 Advanced - source | diff
  • FAPI 2.0 Security Profile - source | diff
  • FAPI 2.0 Message Signing - source | diff