- Home
- OAuth Server Software
- oidc-provider
On the recordRead 7 Oct 202613 facts
oidc-provider
Plans and prices
MIT-licensed library
Free
Node.js authorization server library · features may require configuration
Read 7 Oct 2026 · github.com
On the record
- Configuration
- The authorization server can be extended and configured for different uses, and not all features are enabled by default.github.com · read 7 Oct 2026
- Experimental features
- FAPI-CIBA, attestation-based client authentication, OAuth Client ID Metadata Documents, and OpenID for Verifiable Credential Issuance are listed as experimental.github.com · read 7 Oct 2026
- Framework integrations
- The provider can be mounted in connect, Express, Fastify, Hapi, and Koa applications.github.com · read 7 Oct 2026
- Intended users
- The security policy describes the library as intended for developers building OAuth 2.0 authorization servers and OpenID Connect providers.github.com · read 7 Oct 2026
- License
- The GitHub repository lists the project under the MIT license.github.com · read 7 Oct 2026
- Protocols
- It implements OAuth 2.0, OpenID Connect, discovery, dynamic client registration, logout, token revocation, PKCE, introspection, device flow, and other specifications.github.com · read 7 Oct 2026
- Purpose
- oidc-provider is an OpenID Certified OAuth 2.0 authorization server implementation for Node.js with OpenID Connect support.github.com · read 7 Oct 2026
- Resource limits
- The security policy says the library does not implement resource limits and applications should provide their own rate limiting and resource management.github.com · read 7 Oct 2026
- Security profiles
- The project lists OpenID Connect certification for FAPI 1.0, FAPI CIBA, and FAPI 2.0 profiles, among others.github.com · read 7 Oct 2026
- Security responsibilities
- Users are responsible for securely storing, managing, and rotating cryptographic keys; storage adapter security depends on the adapter and storage system they choose.github.com · read 7 Oct 2026
- Security updates
- The security policy lists v9.x as supported for security updates and directs vulnerability reports through GitHub Security Advisories.github.com · read 7 Oct 2026
- Support
- The README says the only way to guarantee feedback from the author and sole maintainer is to support the package through GitHub Sponsors.github.com · read 7 Oct 2026
- Token formats
- It supports opaque and JWT access token formats.github.com · read 7 Oct 2026
