oidc-provider

oidc-provider.dev · checked 7 Oct 2026

#30 · OAuth Server Software

Visit oidc-provider.dev ↗ Alternatives oidc-provider vs Amazon Cognito

How it plugs in

—Public API

NoOpen source

YesFree tier

Signal on OAuth Server Software5.7#30 of 32

oidc-provider is an OpenID Certified OAuth 2.0 authorization server implementation for Node.js with OpenID Connect support.

Pricing

MIT-licensed libraryNode.js authorization server library · features may require configurationFree

As github.com lists them, checked 7 Oct 2026.

Near it

All alternatives →

Runs on

Web
Windows
Mac
Linux
iOS
Android

Facts

Website: oidc-provider.dev
Price: Free tier
Free trial: No
Configuration: The authorization server can be extended and configured for different uses, and not all features are enabled by default.
Experimental features: FAPI-CIBA, attestation-based client authentication, OAuth Client ID Metadata Documents, and OpenID for Verifiable Credential Issuance are listed as experimental.
Framework integrations: The provider can be mounted in connect, Express, Fastify, Hapi, and Koa applications.
Intended users: The security policy describes the library as intended for developers building OAuth 2.0 authorization servers and OpenID Connect providers.
License: The GitHub repository lists the project under the MIT license.
Protocols: It implements OAuth 2.0, OpenID Connect, discovery, dynamic client registration, logout, token revocation, PKCE, introspection, device flow, and other specifications.
Resource limits: The security policy says the library does not implement resource limits and applications should provide their own rate limiting and resource management.
Security profiles: The project lists OpenID Connect certification for FAPI 1.0, FAPI CIBA, and FAPI 2.0 profiles, among others.
Security responsibilities: Users are responsible for securely storing, managing, and rotating cryptographic keys; storage adapter security depends on the adapter and storage system they choose.
Security updates: The security policy lists v9.x as supported for security updates and directs vulnerability reports through GitHub Security Advisories.
Support: The README says the only way to guarantee feedback from the author and sole maintainer is to support the package through GitHub Sponsors.
Token formats: It supports opaque and JWT access token formats.

On these boards

OAuth Server Software#30 of 32

Built oidc-provider?

Claim the page, then edit your card yourself from your member desk: its name, words, logo, screenshots, plans and links. Your desk shows how many readers open it.

Claim oidc-provider