jwt - Koa middleware for validating JSON Web Tokens

•    Javascript

---

This module lets you authenticate HTTP requests using JSON Web Tokens in your Koa (node.js) applications. See this article for a good introduction.

auth authn authentication authz authorization http jwt json middleware token oauth koa

express-jwt-permissions - :vertical_traffic_light: Express middleware for JWT permissions

•    Javascript

---

Middleware that checks JWT tokens for permissions, recommended to be used in conjunction with express-jwt. This middleware assumes you already have a JWT authentication middleware such as express-jwt.

express jwt permissions middleware authorization token security

slim-jwt-auth - PSR-7 and PSR-15 JWT Authentication Middleware

•    PHP

---

This middleware implements JSON Web Token Authentication. It was originally developed for Slim but can be used with any framework using PSR-7 style middlewares. It has been tested with Slim Framework and Zend Expressive. Middleware does not implement OAuth 2.0 authorization server nor does it provide ways to generate, issue or store authentication tokens. It only parses and authenticates a token when passed via header or cookie. This is useful for example when you want to use JSON Web Tokens as API keys.

middleware jwt psr-7 token-authentication psr-15

angular-token-auth - Token-based authentication in AngularJS

•    Javascript

---

Example of Token-based authentication in [AngularJS](http://angularjs.org) with [Express](http://expressjs.com).

angular auth jwt express

ember-simple-auth-token - Ember Simple Auth extension that is compatible with token-based authentication like JWT

•    Javascript

---

An authenticator and authorizer for Ember Simple Auth that is compatible with token-based authentication like JWT in Ember CLI applications.

ember jwt ember-addon token auth authentication authorization

caddy-auth-portal - Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2

•    Go

---

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0, SAML Authentication. The purpose of this plugin is providing authentication only. The plugin issue JWT tokens upon successful authentication. In turn, the authorization of the tokens is being handled by caddy-auth-jwt.

ldap jwt saml oauth2 authentication caddy jwt-tokens facebook-login ldap-authentication openid-connect authentication-backend user-registration caddy-plugin authentication-portal authentication-middleware user-identity github-authentication caddy2 caddy-module ldap-authentication-backend

permit - An unopinionated authentication library for building Node.js APIs.

•    Javascript

---

An unopinionated authentication library for building Node.js APIs. Permit makes it easy to add an authentication layer to any Node.js API. It can be used with any of the popular server frameworks (eg. Express, Koa, Hapi, Fastify) and it can be used for any type of API (eg. REST, GraphQL, etc.) due to its simple, unopinionated design.

nodejs authentication express koa hapi fastify api auth authn authorization bearer fastly graphql header oauth passport request rest server token

passport-http-bearer - HTTP Bearer authentication strategy for Passport and Node.js.

•    Javascript

---

HTTP Bearer authentication strategy for Passport.

passport auth authn authentication authz authorization http bearer token oauth

nginx-jwt - Lua script for Nginx that performs reverse proxy auth using JWT's

•    Javascript

---

nginx-jwt is a Lua script for the Nginx server (running the HttpLuaModule) that will allow you to use Nginx as a reverse proxy in front of your existing set of HTTP services and secure them (authentication/authorization) using a trusted JSON Web Token (JWT) in the Authorization request header, having to make little or no changes to the backing services themselves.IMPORTANT: nginx-jwt is a Lua script that is designed to run on Nginx servers that have the HttpLuaModule installed. But ultimately its dependencies require components available in the OpenResty distribution of Nginx. Therefore, it is recommended that you use OpenResty as your Nginx server, and these instructions make that assumption.

jwt-auth-guard - JWT Auth Guard for Laravel and Lumen Frameworks.

•    PHP

---

JWT Auth Guard is a Laravel & Lumen Package that lets you use jwt as your driver for authentication guard in your application. The Guard uses tymon/jwt-auth package for authentication and token handling.

jwt jwt-authentication jwt-auth-guard laravel lumen packages composer composer-packages auth driver jwt-auth laravel-5-package middleware laravel-package

oauth2orize - OAuth 2.0 authorization server toolkit for Node.js.

•    Javascript

---

OAuth 2.0 authorization server toolkit for Node.js.

oauth oauth2 auth authz authorization connect express passport middleware oauth2-server oauth2-provider security authentication

jose-jwt - Ultimate Javascript Object Signing and Encryption (JOSE) and JSON Web Token (JWT) Implementation for

•    CSharp

---

Minimallistic zero-dependency library for generating, decoding and encryption JSON Web Tokens. Supports full suite of JSON Web Algorithms as of July 4, 2014 version. JSON parsing agnostic, can plug any desired JSON processing library. Extensively tested for compatibility with jose.4.j, Nimbus-JOSE-JWT and json-jwt libraries.v2.1 and above added extra features support for .NET461+ and coming with 3 version of binaries (NET4, NET461 and netstandard1.4).

jose jwt json jwa jwe jws fips jwt-token jwt-auth jwt-authentication encryption signature security openid oauth2 openidconnect federation netcore jwt-token-library jwt-library json-web-token

node-express-realworld-example-app

•    Javascript

---

Requests are authenticated using the Authorization header with a valid JWT. We define two express middlewares in routes/auth.js that can be used to authenticate requests. The required middleware configures the express-jwt middleware using our application's secret and will return a 401 status code if the request cannot be authenticated. The payload of the JWT can then be accessed from req.payload in the endpoint. The optional middleware configures the express-jwt in the same way as required, but will not return a 401 status code if the request cannot be authenticated.

Apache Oltu - OAuth protocol implementation in Java

•    Java

---

Apache Oltu is an OAuth protocol implementation in Java. It also covers others "OAuth family" related implementations such as JWT, JWS and OpenID Connect.

oauth jwt openid security two-factor-authentication oauth2 oauth2-server oauth2-provider json-web-token jwt-token jwt-library jose oauth2-client

passport-oauth2 - OAuth 2.0 authentication strategy for Passport and Node.js.

•    Javascript

---

OAuth 2.0 authentication strategy for Passport.

passport auth authn authentication authz authorization oauth oauth2

pac4j - The security engine to protect all your Java web applications

•    Java

---

pac4j is a Java security engine to authenticate users, get their profiles and manage their authorizations in order to secure Java web applications. It supports most authentication mechanisms: OAuth (Facebook, Twitter, Google, Yahoo...), CAS, HTTP (form, basic auth...), OpenID, SAML, Google App Engine, OpenID Connect, JWT, LDAP, RDBMS, MongoDB and Stormpath and authorization checks.

security authentication authorization security-framework library oauth openid

SuperTokens - Open source alternative to Auth0 / Firebase Auth / AWS Cognito

•    Java

---

SuperTokens is an open source alternative to Auth0 / Firebase Auth / AWS Cognito. It supports authentication using email ID and password, Social logins (Google, Facebook, Apple, Github + adding custom providers), Forgot password flow using email, Secure session management, Email verification.

authentication login password auth0 session-management passportjs signin aws-cognito social-login firebase-auth email-password email-password-login social-authentication authentication-service auth0-alternative

passport-facebook-token - Passport strategy for authenticating with Facebook access tokens using the OAuth 2

•    Javascript

---

Passport strategy for authenticating with Facebook access tokens using the OAuth 2.0 API. This module lets you authenticate using Facebook in your Node.js applications. By plugging into Passport, Facebook authentication can be easily and unobtrusively integrated into any application or framework that supports Connect-style middleware, including Express.

passport facebook auth authn authentication identity

auth0.js - Auth0 headless browser sdk

•    Javascript

---

Auth0 headless browser sdk

auth0 oauth2 authentication authorization jwt browser login brucke sdk auth openid

google-auth-library-nodejs - 🔑 Google Auth Library for Node.js

•    TypeScript

---

This is Google's officially supported node.js client library for using OAuth 2.0 authorization and authentication with Google APIs. This library provides a variety of ways to authenticate to your Google services.

google oauth jwt authentication google-cloud oauth2-client api google-apis client client-library