panva/openid-client

Health v2 · maintenance only

Adoption not part of the score

2398 stars · 410 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

openid-client is a TypeScript library providing OAuth 2.0 and OpenID Connect client APIs for JavaScript runtimes including Node.js, Deno, browsers, and Cloudflare Workers. It implements certified authorization and authentication flows such as Authorization Code, CIBA, Device Authorization, and FAPI profiles.

Use cases

• add OpenID Connect login to a Node.js app
• implement OAuth 2.0 authorization code flow
• integrate with an identity provider like Auth0 or Keycloak
• perform token introspection and revocation
• use client credentials grant for machine-to-machine auth
• build a FAPI-compliant relying party
• add a Passport strategy for OIDC authentication
• handle DPoP proof-of-possession tokens

When to choose

• you need a certified, standards-compliant OIDC/OAuth client in JavaScript
• you support multiple JS runtimes (Node, Deno, Workers, browsers)
• you need advanced flows like CIBA, PAR, JAR, JARM, or DPoP
• you want an actively maintained library with OpenID certification

When to avoid

• you need an OAuth/OIDC server or provider, not a client
• you are outside the JavaScript ecosystem
• you only need simple social login with a hosted SDK like Auth0's
• you need a full framework with built-in session management

Facets

library · maturity stable

auth authorization http-client sdk security web-development apis browser cross-platform oauth2 openid-connect oidc authentication-flows fapi dpop passport-strategy typescript authentication nodejs deno web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="panva/openid-client")