Authentication Libraries

Better Auth

better-auth/better-auth

Trending

Framework-agnostic TypeScript auth library with plugins for 2FA, orgs and passkeys; now stewards Auth.js.

Auth.js

nextauthjs/next-auth

Legacy

Formerly NextAuth.js; widely deployed OAuth/session library, now security-maintained by the Better Auth team.

Passport.js

jaredhanson/passport

Strategy-based authentication middleware for Express with 500+ strategies; mature but slow-moving.

Clerk

clerk.com

Hosted auth and user management with drop-in UI components, popular in the Next.js ecosystem.

Auth0

auth0.com

Popular

Okta-owned hosted identity platform with SDKs for every stack; a common enterprise default.

Supabase Auth

supabase/auth

Trending (detected automatically)

Go-based JWT auth server (a GoTrue fork) powering Supabase, usable managed or self-hosted.

Keycloak

keycloak/keycloak

Popular

CNCF open-source identity and access management server with SSO, OIDC, SAML and user federation.

Spring Security

spring-projects/spring-security

Popular

Authentication, authorization and OAuth2/OIDC support for Spring applications.

Devise

heartcombo/devise

Flexible, Warden-based authentication for Rails; Rails 8's built-in auth generator now covers simple cases.

django-allauth

allauth.org

Integrated local and social (OAuth/OIDC/SAML) authentication, MFA and account management for Django.

jose

panva/jose

Dependency-free JWT, JWS, JWE and JWK library that works in every JavaScript runtime.

Lucia

lucia-auth/lucia

Legacy

Session auth library deprecated in 2025; now a learning resource for implementing auth yourself.