express-rate-limit
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
Updated by @nfriedly
openid-client
OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs
Updated by @panva
passport-local
Local username and password authentication strategy for Passport.
Updated by @jaredhanson
idtoken-verifier
A lightweight library to decode and verify RS JWT meant for the browser.
Updated by @auth0-oss
otpauth
One Time Password (HOTP/TOTP) library for Node.js, Deno and browsers
Updated by @hectormolinero