Side-by-side comparison

Dependency-free JWT, JWS, JWE and JWK library that works in every JavaScript runtime.

Framework-agnostic TypeScript auth library with plugins for 2FA, orgs and passkeys; now stewards Auth.js.

Formerly NextAuth.js; widely deployed OAuth/session library, now security-maintained by the Better Auth team.

Strategy-based authentication middleware for Express with 500+ strategies; mature but slow-moving.