Grant
Node.js OAuth proxy middleware that runs OAuth and OpenID Connect login flows for Express, Koa, Hapi, Fastify and serverless functions.
Grant runs the redirect and callback steps of an OAuth or OpenID Connect login, and hands a Node.js web app the tokens, and optionally the user profile, from the provider. It mounts as middleware on Express, Koa, Hapi or Fastify, or runs as a handler for AWS Lambda, Azure Functions, Google Cloud Functions or Vercel.
Providers are set in a configuration object. Grant uses the app’s session to keep state between the redirects of a login, and the README documents the OAuth 1.0a and OAuth 2.0 flows and OpenID Connect.
Worth knowing
The README warns that the querystring transport can leak private data into server logs. It also says Grant does not verify the signature of an id_token by default.
Identity
- Status
- Stub
- Maintainer
- Simeon Velichkov4
- Maintained by
- Individual
- First release
- 20145
Releases
Adoption
Sources
- 2026-11-09: links, Written in, License, GitHub stars
api.github.com/repos/simov/grant - 2026-11-09: Categories
raw.githubusercontent.com/simov/grant/master/README.md - 2026-11-09: Runtime, Minimum runtime
raw.githubusercontent.com/simov/grant/v5.4.24/package.json - 2026-11-09: License model, Maintainer
raw.githubusercontent.com/simov/grant/master/LICENSE - 2026-11-09: First release, Last release
registry.npmjs.org/grant - 2026-11-09: Current major version
registry.npmjs.org/grant/latest - 2026-11-09: Contributors
api.github.com/repos/simov/grant/contributors?per_page=1 - 2026-11-09: npm downloads a week
api.npmjs.org/downloads/range/2026-11-01:2026-11-07/grant - 2026-11-09: Dependent packages, Dependent repositories
packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/grant