# @medusajs/auth

> Medusa Auth module

Latest version **2.21.2** (published 2026-09-28) · MIT license · 0 weekly downloads

## Install

```sh
npm install @medusajs/auth
pnpm add @medusajs/auth
yarn add @medusajs/auth
bun add @medusajs/auth
```

## Health

**Score 75/100 (B)** — status: active.

Positive: has types; no vulnerabilities; has provenance; recently updated; high maintenance score; high quality score; popular repo.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 2.21.2 |
| Published | 2026-09-28 |
| First published | 2024-01-30 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | >=20 |
| Dependencies | 7 |
| Unpacked size | 278.4 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 36468 |
| Author | Medusa |
| Maintainers | sebrindom, oliverjuhl, nicolas-gorga, sradevski, olijuhl, shahednasser |

## Links

- npm: https://www.npmjs.com/package/@medusajs/auth
- Repository: https://github.com/medusajs/medusa
- Homepage: https://github.com/medusajs/medusa#readme
- Issues: https://github.com/medusajs/medusa/issues
- npm.io page: https://npm.io/package/@medusajs/auth

## Dependencies (7)

- [jwks-rsa](https://npm.io/package/jwks-rsa.md) ^3.1.0
- [scrypt-kdf](https://npm.io/package/scrypt-kdf.md) ^2.0.1
- [@otplib/uri](https://npm.io/package/@otplib/uri.md) ^13.4.0
- [@otplib/core](https://npm.io/package/@otplib/core.md) ^13.4.0
- [@otplib/totp](https://npm.io/package/@otplib/totp.md) ^13.4.0
- [jsonwebtoken](https://npm.io/package/jsonwebtoken.md) ^9.0.2
- [@otplib/plugin-crypto-node](https://npm.io/package/@otplib/plugin-crypto-node.md) ^13.4.0

## Recent versions

- 2.21.2 (latest) — 2026-09-28
- 2.22.0-snapshot-20261008225942 (snapshot) — 2026-10-08
- 2.22.0-preview-20261002101246 (preview) — 2026-10-02
- 2.16.0-options-preview-20260605124754 (options-preview) — 2026-06-05
- 2.0.0-rc-20241022183311 (rc) — 2024-10-22
- 0.0.4-next-20240505114610 (next) — 2024-05-05
- 2.22.0-snapshot-20261008220405 — 2026-10-08
- 2.22.0-snapshot-20261008144129 — 2026-10-08
- 2.22.0-snapshot-20261006025321 — 2026-10-06
- 2.22.0-preview-20261002093930 — 2026-10-02
- 2.21.2-snapshot-20260928075521 — 2026-09-28
- 2.21.2-snapshot-20260925150426 — 2026-09-25
- 2.21.2-preview-20260925133948 — 2026-09-25
- 2.21.1 — 2026-09-22
- 2.21.1-preview-20260922104932 — 2026-09-22
- … 171 more at https://npm.io/package/@medusajs/auth/versions

## README

# Auth Module

The Auth Module is Medusa’s authentication engine engine. It provides functions to authenticate users through identity providers and store metadata about users that can be used for authorization purposes.

---
_Source: https://npm.io/package/@medusajs/auth · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._