Freedom251 › OAuth Server Software
oidc-provider
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| MIT-licensed library | Node.js authorization server library · features may require configuration | Free |
As oidc-provider.dev lists them, read 7 Oct 2026. The maker's own page has the final word.
Facts from oidc-provider's own pages
- Configuration
- The authorization server can be extended and configured for different uses, and not all features are enabled by default. · github.com, 7 Oct 2026
- Experimental features
- FAPI-CIBA, attestation-based client authentication, OAuth Client ID Metadata Documents, and OpenID for Verifiable Credential Issuance are listed as experimental. · github.com, 7 Oct 2026
- Framework integrations
- The provider can be mounted in connect, Express, Fastify, Hapi, and Koa applications. · github.com, 7 Oct 2026
- Intended users
- The security policy describes the library as intended for developers building OAuth 2.0 authorization servers and OpenID Connect providers. · github.com, 7 Oct 2026
- License
- The GitHub repository lists the project under the MIT license. · github.com, 7 Oct 2026
- Protocols
- It implements OAuth 2.0, OpenID Connect, discovery, dynamic client registration, logout, token revocation, PKCE, introspection, device flow, and other specifications. · github.com, 7 Oct 2026
- Purpose
- oidc-provider is an OpenID Certified OAuth 2.0 authorization server implementation for Node.js with OpenID Connect support. · github.com, 7 Oct 2026
- Resource limits
- The security policy says the library does not implement resource limits and applications should provide their own rate limiting and resource management. · github.com, 7 Oct 2026
- Security profiles
- The project lists OpenID Connect certification for FAPI 1.0, FAPI CIBA, and FAPI 2.0 profiles, among others. · github.com, 7 Oct 2026
- Security responsibilities
- Users are responsible for securely storing, managing, and rotating cryptographic keys; storage adapter security depends on the adapter and storage system they choose. · github.com, 7 Oct 2026
- Security updates
- The security policy lists v9.x as supported for security updates and directs vulnerability reports through GitHub Security Advisories. · github.com, 7 Oct 2026
- Support
- The README says the only way to guarantee feedback from the author and sole maintainer is to support the package through GitHub Sponsors. · github.com, 7 Oct 2026
- Token formats
- It supports opaque and JWT access token formats. · github.com, 7 Oct 2026
Where oidc-provider stands on Freedom251
- OAuth Server Software#28 of 32