# damienbod/angular-auth-oidc-client

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

Repository: https://github.com/damienbod/angular-auth-oidc-client
Canonical: https://ross.abutalabs.com/products/angular-auth-oidc-client
Homepage: https://www.npmjs.com/package/angular-auth-oidc-client
Language: TypeScript
License: MIT
License Family: permissive
Topics: openid, angular, implicit-flow, npm, security, oauth2, oidc, authn, auth, identity, openidconnect, authentication
Last push: 2026-08-26T09:24:52+00:00

## Health v2 (maintenance only)
Score: 95/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 86, longevity 100
- inputs: {"age_days": 3368, "days_push": 7, "days_rel": 18, "gap_med": 42.0, "n_releases_24m": 13}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1239, forks 450 (observed 2026-08-28T04:04:06.063860+00:00)

## What it is
An npm library for securing Angular applications with OpenID Connect and OAuth2, supporting Code Flow with PKCE, refresh tokens, and the Implicit Flow. It is certified by the OpenID Foundation and works with all modern OIDC identity providers.

## Use cases
- add openid connect authentication to an angular app
- implement oauth2 code flow with pkce in angular
- refresh access tokens in an angular spa
- authenticate angular app with identityserver or auth0
- handle token revocation and session management in angular
- login with redirect or popup in an angular application

## When to choose
- you are building an Angular single-page application that needs standards-compliant OIDC/OAuth2 authentication
- you need PKCE, refresh tokens, PAR, or token revocation support in the browser
- you want an OpenID Foundation certified relying-party library with active maintenance

## When to avoid
- your frontend is React, Vue, or another non-Angular framework
- you need server-side or backend authentication middleware rather than a client-side SPA library
- you only need simple session cookies without OIDC

## Facets
- artifact type: library
- maturity: active
- function: auth, security
- domain: web-development, frontend, security, apis
- platform: browser
- tags: openid-connect, oauth2, pkce, code-flow, implicit-flow, refresh-tokens, identity-provider, npm-package, typescript, angular, nodejs, web-server

## Member repositories
- damienbod/angular-auth-oidc-client (main) score 95

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:06.063860+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:09:56.973341+00:00, confidence not recorded.
  - readme: https://github.com/damienbod/angular-auth-oidc-client (fetched 2026-08-28T04:04:06.063860+00:00, sha 0f3a44b3f332)
- Data as of 2026-08-30T08:39:29.467469+00:00.