Oidc Client
Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).
Overview
The @axa-fr/oidc-client library has quickly gained recognition as a lightweight and secure solution for managing authentication with OpenID Connect (OIDC) and the OAuth2 protocol. Designed to be highly compatible with any JavaScript framework, this library offers developers a simple and effective way to implement secure authentication in their applications. Whether you're working in a React environment or looking to adapt it for frameworks like Vue or Angular, the versatility of this client library sets it apart.
Moreover, the library prioritizes security by incorporating advanced features such as Demonstrating Proof of Possession (DPoP) and support for Service Workers, making it a formidable choice for protecting user tokens and credentials. With its lightweight structure and robust features, @axa-fr/oidc-client is an excellent option for developers focusing on secure and efficient authentication.
Features
-
Secure Authentication: Utilizes Demonstrating Proof of Possession (DPoP) to ensure that access and refresh tokens are safe within the browser context, enhancing protection against misuse.
-
Service Worker Integration: By leveraging Service Workers, tokens are protected from direct access by JavaScript client code, making your application more secure when following best practices.
-
Lightweight Design: The library is compact, with an unpacked size of just 274 kB and a minified version of only 61.1 kB, ensuring fast performance and efficient loading times.
-
Auto Token Refresh: Automatically refreshes access and refresh tokens in the background using Service Workers, reducing the need for manual token management.
-
Multiple Authentication Support: Allows you to authenticate multiple times with the same provider for different scopes or connect various providers simultaneously in one single-page application.
-
Flexible Configuration: Works seamlessly with or without Service Workers; developers can choose to disable it for compatibility with older browsers while still utilizing SessionStorage or LocalStorage.
-
Broad Compatibility: Integrates effortlessly with several popular OIDC providers, including Auth0, Azure AD, Google, and Keycloak, offering great flexibility for developers.
-
Developer-Friendly: Documentation and demos are readily available to assist developers in getting started and effectively utilizing the library’s features.
- Next.js
Next.js is a React-based web framework that enables server-side rendering, static site generation, and other powerful features for building modern web applications.
- React
React is a widely used JavaScript library for building user interfaces and single-page applications. It follows a component-based architecture and uses a virtual DOM to efficiently update and render UI components
- Eslint
ESLint is a linter for JavaScript that analyzes code to detect and report on potential problems and errors, as well as enforce consistent code style and best practices, helping developers to write cleaner, more maintainable code.
- Redux
Redux is a state management library for JavaScript apps that provides a predictable and centralized way to manage application state. It enables developers to write actions and reducers that update the state in response to user interactions, server responses, and other events, and can be used with a variety of front-end frameworks and back-end technologies.
- Typescript
TypeScript is a superset of JavaScript, providing optional static typing, classes, interfaces, and other features that help developers write more maintainable and scalable code. TypeScript's static typing system can catch errors at compile-time, making it easier to build and maintain large applications.