Auth-Kit-JSUniversal Authentication for JavaScript

Secure, type-safe, and tree-shakeable authentication library

Get Started

View on GitHub

🔐

Multi-Provider Support

Google OAuth2/OIDC, Facebook OAuth2, and Telegram (WebApp + Login Widget) out of the box.

🛡️

Secure by Default

PKCE, HMAC verification, timing-safe comparisons, and OAuth state protection built-in.

🌍

Universal

Works in both browser and Node.js environments with conditional exports.

📦

Tree-Shakeable

Import only what you need. Separate browser and server bundles for optimal bundle size.

🎯

TypeScript First

Full type definitions with generics support. Excellent IDE autocompletion.

⚡

Express Ready

Zero-config Express adapter with all routes pre-configured.

Quick Example

typescript

import { createAuthRouter } from "auth-kit-js/express";

const authRouter = createAuthRouter({
  google: {
    clientId: process.env.GOOGLE_CLIENT_ID,
    clientSecret: process.env.GOOGLE_CLIENT_SECRET,
    redirectUri: "http://localhost:3000/auth/google/callback",
  },
  telegram: {
    botToken: process.env.TELEGRAM_BOT_TOKEN,
  },
  async onLogin(profile) {
    // User authenticated!
    return { token: generateToken(profile) };
  },
});

app.use("/auth", authRouter);