@jaccomeijer/oauth2-grants v6.31.4

oauth2-grants

Library for handling OAuth 2 auth requests with Express.

Database models

• AuthCodeCollection
• ClientCollection
• ScopeCollection
• TokenCollection
• UserCollection

Database API interface

• CollectionApi

Implemented grants

Authorization code

• RFC: https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.1)
• Source: authorization-code-grant.ts

Client Credentials

• RFC: https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.4)
• Source: client-credentials-grant.ts

Refresh token

• RFC: https://datatracker.ietf.org/doc/html/rfc6749#section-1.5)
• Source: refresh-token-grant.ts

Unsafe grants (not implemented)

• Implicit (https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.2)
• Resource Owner Password Credentials (https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.3)

PKCE

• PKCE (https://datatracker.ietf.org/doc/html/rfc7636)

Roadmap

• Unit tests
• Documented express oath2 server example