node-oauth2-server VS Grant

View on GitHub

There's a module on npm that abstracts away the "complicated" bits of oauth - you define just the model functions (like, "retrieve access token", "retrieve valid clients", etc.) and integrations into the request/responses with your favourite web framework -- see https://github.com/node-oauth/node-oauth2-server -- this is a fork of another module that was abandoned. I use this in prod.

In general I would agree, but only if u will go with some 3rd party vendor, like Google or Auth0 from okta, implementing oauth resource server is a real challenge even if u would use community https://github.com/node-oauth/node-oauth2-server packages...

(I use the node-oauth2-server library for backend authentication on my personal app.)

I am implementing OAuth with Grant. It looks pretty fantastic with 200+ providers and completely manages full OAuth with a single config file. The problem is I am unable to work it with Next JS. The library works perfectly when I create a test project with express and express-session with these libraries it works perfectly from login to logout everything. In Next JS, I am using iron-session for session management.

Thanks for taking a look! I use the https://www.npmjs.com/package/grant for OAuth (to spare people having to remember yet another password) and I believe it uses cookies to prevent OAuth replay attacks. Thanks for highlighting this. I'll work on a better error message if cookies are not enabled.

Use a proxy like grant or delegating Idp like dex

An alternative to passport is https://github.com/simov/grant