Ross ROSS = Recommend OSS · open-source software intelligence for agents

oidc-client-ts

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications observed · 2026-10-08

github.com/authts/oidc-client-ts · homepage · TypeScript · Apache-2.0 (permissive) observed · 2026-10-08

Health v2 · maintenance only

81/100

  • Activity 92
  • Release rhythm 55
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 51.0
  • age_days: 1926
  • days_rel: 221
  • days_push: 49
  • n_releases_24m: 7

Full methodology

Adoption not part of the score

1957 stars · 272 forks observed · 2026-10-08

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

oidc-client-ts is a TypeScript library providing OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications, including user session and access token management. It is an actively maintained fork of the discontinued oidc-client-js, with a companion react-oidc-context package offering React context-based state management for authentication.

Use cases

  • add OIDC login to a single-page application
  • implement OAuth2 authorization code flow with PKCE in the browser
  • manage access tokens and silent refresh in a JavaScript app
  • authenticate a React app against an identity provider
  • sign users in and out with an OpenID Connect provider
  • handle refresh tokens and iframe-based silent renew
  • migrate from the deprecated oidc-client-js library

When to choose

  • you need a spec-compliant, browser-side OIDC/OAuth2 client in TypeScript
  • your SPA uses authorization code flow with PKCE against providers like Auth0, Keycloak, or IdentityServer
  • you want React integration via context API
  • you need session and token management without a full framework

When to avoid

  • you need the implicit grant, which is no longer supported
  • you need server-side or native mobile OAuth flows rather than browser-based ones
  • you want a batteries-included UI with login screens rather than a protocol library
  • you need OAuth 2.0 grants outside the OAuth 2.1 trajectory

Facets

library · maturity active

auth http-client sdk security web-development frontend apis browser cross-platform oidc oauth2 openid-connect authentication pkce token-management react session-management browser-based nodejs typescript

4 sources

Member repositories

For agents

markdown · JSON · MCP: product_card(name="authts/oidc-client-ts")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem