Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).
The @axa-fr/oidc-client library has quickly gained recognition as a lightweight and secure solution for managing authentication with OpenID Connect (OIDC) and the OAuth2 protocol. Designed to be highly compatible with any JavaScript framework, this library offers developers a simple and effective way to implement secure authentication in their applications. Whether you’re working in a React environment or looking to adapt it for frameworks like Vue or Angular, the versatility of this client library sets it apart.
Moreover, the library prioritizes security by incorporating advanced features such as Demonstrating Proof of Possession (DPoP) and support for Service Workers, making it a formidable choice for protecting user tokens and credentials. With its lightweight structure and robust features, @axa-fr/oidc-client is an excellent option for developers focusing on secure and efficient authentication.
Secure Authentication: Utilizes Demonstrating Proof of Possession (DPoP) to ensure that access and refresh tokens are safe within the browser context, enhancing protection against misuse.
Service Worker Integration: By leveraging Service Workers, tokens are protected from direct access by JavaScript client code, making your application more secure when following best practices.
Lightweight Design: The library is compact, with an unpacked size of just 274 kB and a minified version of only 61.1 kB, ensuring fast performance and efficient loading times.
Auto Token Refresh: Automatically refreshes access and refresh tokens in the background using Service Workers, reducing the need for manual token management.
Multiple Authentication Support: Allows you to authenticate multiple times with the same provider for different scopes or connect various providers simultaneously in one single-page application.
Flexible Configuration: Works seamlessly with or without Service Workers; developers can choose to disable it for compatibility with older browsers while still utilizing SessionStorage or LocalStorage.
Broad Compatibility: Integrates effortlessly with several popular OIDC providers, including Auth0, Azure AD, Google, and Keycloak, offering great flexibility for developers.
Developer-Friendly: Documentation and demos are readily available to assist developers in getting started and effectively utilizing the library’s features.
