# Grant

Node.js OAuth proxy middleware that runs OAuth and OpenID Connect login flows for Express, Koa, Hapi, Fastify and serverless functions.

STUB. This software has no release or pre-release in four years, or its project site no longer shows it, so it is not part of the register, not counted and not indexed. It will be checked again.

Source: https://findsoftware.frbit.cloud/grant/
Last reviewed: 2026-11-09
Listed since: 2026-11-09

## Record

### Links

- repository: https://github.com/simov/grant

### Identity

- status: stub
- maintainer: Simeon Velichkov
- maintainerType: individual
- parent: unknown
- firstRelease: 2014
- hqCountry: unknown

### Kind

- category: auth
- hosting: node
- language: javascript
- runtime: node
- runtimeMin: node 12
- basedOn: unknown

### Content

- contentStore: not applicable
- databases: not applicable
- adminUi: not applicable
- headlessApi: not applicable
- templating: not applicable
- i18n: not applicable

### Rendering and deploy

- runsAs: unknown
- renderingModes: not applicable
- installMethod: unknown

### License

- licenseModel: open-source
- license: MIT

### Releases

- currentMajor: 5
- latestReleaseDate: 2025-02-04

### Adoption

- githubStargazers: 4163
- packagistDownloads: not applicable
- npmWeeklyDownloads: 321042
- contributors: 46
- pluginCount: unknown
- packagistMonthlyDownloads: unknown
- ecosystemsMonthlyDownloads: unknown
- httpArchiveSites: unknown
- wordpressActiveInstalls: unknown
- dependentRepos: 10551
- dependentPackages: 49

### Sources

- urls: https://api.github.com/repos/simov/grant (read 2026-11-09)
- language: https://api.github.com/repos/simov/grant (read 2026-11-09)
- category: https://raw.githubusercontent.com/simov/grant/master/README.md (read 2026-11-09)
- runtime: https://raw.githubusercontent.com/simov/grant/v5.4.24/package.json (read 2026-11-09)
- runtimeMin: https://raw.githubusercontent.com/simov/grant/v5.4.24/package.json (read 2026-11-09)
- license: https://api.github.com/repos/simov/grant (read 2026-11-09)
- licenseModel: https://raw.githubusercontent.com/simov/grant/master/LICENSE (read 2026-11-09)
- maintainer: https://raw.githubusercontent.com/simov/grant/master/LICENSE (read 2026-11-09)
- firstRelease: https://registry.npmjs.org/grant (read 2026-11-09)
- currentMajor: https://registry.npmjs.org/grant/latest (read 2026-11-09)
- latestReleaseDate: https://registry.npmjs.org/grant (read 2026-11-09)
- githubStargazers: https://api.github.com/repos/simov/grant (read 2026-11-09)
- contributors: https://api.github.com/repos/simov/grant/contributors?per_page=1 (read 2026-11-09)
- npmWeeklyDownloads: https://api.npmjs.org/downloads/range/2026-11-01:2026-11-07/grant (read 2026-11-09)
- dependentPackages: https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/grant (read 2026-11-09)
- dependentRepos: https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/grant (read 2026-11-09)

## Notes

Grant runs the redirect and callback steps of an OAuth or OpenID Connect login, and hands a Node.js web app the tokens, and optionally the user profile, from the provider. It mounts as middleware on Express, Koa, Hapi or Fastify, or runs as a handler for AWS Lambda, Azure Functions, Google Cloud Functions or Vercel.

Providers are set in a configuration object. Grant uses the app's session to keep state between the redirects of a login, and the README documents the OAuth 1.0a and OAuth 2.0 flows and OpenID Connect.

## Worth knowing

The README warns that the querystring transport can leak private data into server logs. It also says Grant does not verify the signature of an id_token by default.

---

Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attributes are recorded, never scored; absent means unknown.
Credit, in full: FindSoftware, CC BY 4.0