Authentication
Passport - Simple, unobtrusive authentication.
Grant - OAuth middleware for Express, Koa, and Hapi.
Authorization
CASL - Isomorphic authorization for UI and API.
node-casbin - Authorization library that supports access control models like ACL, RBAC and ABAC.
https://github.com/ApacheAlpha/awesome-nodejs#security
OAuth Libraries for Node.js
Here you'll find the best Node.js libraries for building OAuth clients and servers.
Client Libraries
openid-client. OpenID Certified™ Client implementation for Node.js
Grant
PassportJS
OAuth2-client-js
Server Libraries
oidc-provider. OpenID Certified™ Provider implementation for Node.js
NodeJS OAuth 2.0 Provider
Mozilla Firefox Accounts. A full stack Identity Provider system developed to support Firefox Marketplace and other services
OAuth2orize: toolkit to implement OAuth2 Authorization Servers
https://oauth.net/code/nodejs/
https://www.npmtrends.com/@casl/ability-vs-casbin-vs-casl
