mikenicholson/passport-jwt

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1980 stars · 210 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

passport-jwt is a Passport authentication strategy for Node.js that authenticates HTTP requests using JSON Web Tokens. It extracts a JWT from incoming requests, verifies its signature and optional claims (issuer, audience, expiration, algorithms), and enables session-less token-based authentication for RESTful API endpoints.

Use cases

• authenticate a node.js express API with JWT bearer tokens
• add JSON Web Token authentication to a Passport-based app
• secure RESTful endpoints without server-side sessions
• verify JWT signature from the Authorization header in Node.js
• token-based stateless authentication for a REST API
• passport strategy that validates JWT issuer, audience, and expiration
• extract and verify a JWT from a request using a custom extractor

When to choose

• Your Node.js app already uses Passport and you want to add JWT-based, session-less authentication
• You need to secure RESTful API endpoints with signed tokens using either symmetric secrets or PEM-encoded public keys
• You need flexible token extraction from headers, query strings, cookies, or body, or per-request secret resolution via secretOrKeyProvider

When to avoid

• You are not using Passport and just need standalone JWT verification (use jsonwebtoken or a simple middleware directly)
• You need browser login flows with sessions, OAuth, or OpenID Connect (other Passport strategies or an identity provider SDK fit better)
• You require built-in JWKS key-rotation support from an identity provider without writing a custom secretOrKeyProvider

Facets

library · maturity active

auth middleware security web-development backend apis jwt passport passport-strategy json-web-tokens token-authentication stateless-auth rest-api express npm-package nodejs web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mikenicholson/passport-jwt")