oauth2-jwt-bearer

Monorepo for oauth2-jwt-bearer. Contains the following packages:

package	published	description
oauth2-bearer	✘	Gets Bearer tokens from a request and issues errors per rfc6750
access-token-jwt	✘	Verfies and decodes Access Token JWTs loosley following draft-ietf-oauth-access-token-jwt-12
express-oauth2-jwt-bearer	✔	Authentication middleware for Express.js that validates JWT Bearer Access Tokens

Developing

This monorepo uses npm workspaces. You must have npm >= @7.14 to develop this package

To run a command in the context of a workspace from the root use the --workspace or --workspaces arguments.

# install jose on access-token-jwt
npm run install jose --workspace=access-token-jwt

# build oauth2-bearer
npm run build --workspace=oauth2-bearer

# run all tests
npm test --workspaces # you can also use the `npm test` script

Playground app

npm run dev --workspace=packages/examples

Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

• Auth0's general contribution guidelines
• Auth0's code of conduct guidelines

Contributions can be made to this library through PRs to fix issues, improve documentation or add features. Please fork this repo, create a well-named branch, and submit a PR with a complete template filled out.

Code changes in PRs should be accompanied by tests covering the changed or added functionality. Tests can be run for this library with:

npm install
npm test

When you're ready to push your changes, please run the lint command first:

npm run lint

Support + Feedback

Please use the Issues queue in this repo for questions and feedback.

Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

What is Auth0?

Auth0 helps you to easily:

• implement authentication with multiple identity providers, including social (e.g., Google, Facebook, Microsoft, LinkedIn, GitHub, Twitter, etc), or enterprise (e.g., Windows Azure AD, Google Apps, Active Directory, ADFS, SAML, etc.)
• log in users with username/password databases, passwordless, or multi-factor authentication
• link multiple user accounts together
• generate signed JSON Web Tokens to authorize your API calls and flow the user identity securely
• access demographics and analytics detailing how, when, and where users are logging in
• enrich user profiles from other data sources using customizable JavaScript rules

Why Auth0?

License

This project is licensed under the MIT license. See the LICENSE file for more info.