# openid/AppAuth-JS

JavaScript client SDK for communicating with OAuth 2.0 and OpenID Connect providers.

Repository: https://github.com/openid/AppAuth-JS
Canonical: https://ross.abutalabs.com/products/appauth-js
Language: TypeScript
License: Apache-2.0
License Family: permissive
Topics: oauth2, openid-connect, web
Last push: 2026-08-18T22:26:45+00:00

## Health v2 (maintenance only)
Score: 76/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 35, longevity 100
- inputs: {"age_days": 3439, "days_push": 15, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1014, forks 166 (observed 2026-08-28T04:03:13.915662+00:00)

## What it is
AppAuth-JS is a TypeScript client SDK for OAuth 2.0 and OpenID Connect, designed for public clients following RFC 8252 best practices. It supports PKCE and works in web apps, Node.js CLIs, Chrome apps, and Electron applications.

## Use cases
- add oauth2 login to a web app
- implement openid connect authentication in javascript
- secure authorization code flow with pkce
- authenticate a nodejs cli app against an oauth provider
- exchange authorization codes for tokens
- fetch openid connect provider discovery configuration
- add sign-in to an electron app

## When to choose
- you need standards-compliant OAuth 2.0 / OIDC client behavior in JS or TypeScript
- you are building a public client (SPA, CLI, Electron) that should use PKCE
- you want fine-grained control over authorization and token requests

## When to avoid
- you need a full identity provider or server-side session management
- you want a batteries-included auth UI or user management (use an auth service SDK instead)
- your app is a confidential server-side client needing client-secret flows with advanced session features

## Facets
- artifact type: library
- maturity: active
- function: auth, sdk, http-client
- domain: security, web-development, apis, developer-tools
- platform: browser, cross-platform
- tags: oauth2, openid-connect, pkce, typescript, authentication, nodejs, electron

## Member repositories
- openid/AppAuth-JS (main) score 76

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:13.915662+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:11:34.851207+00:00, confidence not recorded.
  - readme: https://github.com/openid/AppAuth-JS (fetched 2026-08-28T04:03:13.915662+00:00, sha d91fc4e502d1)
- Data as of 2026-08-30T08:39:29.467469+00:00.