{"repo":"panva/oauth4webapi","free":true,"listed":false,"github":"https://github.com/panva/oauth4webapi","clone":"git clone https://github.com/panva/oauth4webapi.git","description":"Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes","language":"TypeScript","stars":770,"topics":["oauth2","openid","openid-connect","oidc","authentication","authorization","browser","cloudflare-workers","deno","electron"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"oauth4webapi Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes This software provides a collection of routines that can be used to build client modules for OAuth 2.1, OAuth 2.0 with the latest Security Best Current Practices (BCP), and FAPI 2.0, as well as OpenID Connect where applicable. The primary goal of this software is to promote secure and up-to-date best practices while using only the capabilities common to both browser and non-browser JavaScript runtimes. Features The following features are currently in scope and implemented in this software: - Authorization Server Metadata discovery - Resource Server Metadata discovery - Authorization Code Flow (profiled under OpenID Connect 1.0, OAuth 2.0, OAuth 2.1, and FAPI 2.0), with PKCE - Refresh Token, Device Authorization, Client-Initiated Backchannel Authentication (CIBA), and Client Credentials Grants - Demonstrating Proof-of-Possession at the Application Layer (DPoP) - Token Introspection and Revocation - Pushed Authorization Requests (PAR) - UserInfo and Protected Resource Requests - Authorization Server Issuer Identification - JWT Secured Introspection, Response Mode (JARM), Authorization Request (JAR), and UserInfo - Dynamic Client Registration (DCR) - Validating incoming JWT Access Tokens Sponsor If you want to quickly add authentication to JavaScript apps, feel free to check out Auth0's JavaScript SDK and free plan. [Create an Auth0 account; it's free!][sponsor-auth0] Certification Filip Skokan ha","default_branch":null,"files":null,"tree":[],"storefront":"/r/panva","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/panva/oauth4webapi/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}