next-auth

Auth.js is a collection of open-source authentication packages based on the standard Web API, available at each roof and JavaScript runtime. Works with or without database; promotes unencrypted entry, uses CSRF token on POST routes, and encrypts JWT by default (JWE). According to README, Auth.js is now part of Better Auth, and new projects are recommended to start with Better Auth.

NE

nextauthjs · Authentication & Identity

STARS28.4K
FORKS4.0K
COMMITS4.0K
CONTRIBUTORS455
UPDATED3 mo ago
TypeScriptAuthenticationOAuthSecurityISC

Common commercial products in this category: Auth0, Okta, AWS Cognito

What can it do?
  • You do user authentication with OAuth services, OIDC, email, or Passkeys methods.
  • You store your data on your own servers using different database adapters such as MySQL, Postgres, MongoDB.
  • You can configure session security with JSON Web Token encryption and custom cookie policies.
Heads up
  • • High number of open issues (603)
User reviews
  • ↑ PositiveGitHub Issue

    Need to set NEXTAUTH_URL dynamically as an Option for multi-domain/multi-tenant use

    “**Your question** How to dynamically work with Passwordless/Email auth, without setting NEXTAUTH_URL. **What are you trying to do** I am working on a use-case where NEXTAUTH_URL is not fixed at deploy-time or build-time, but run-time, for a multi-domain (single codebase)…”

  • ↓ NegativeGitHub Issue

    Request timed out error while using Google provider

    “### Description 🐜 After following the docs for Prisma Adapter and Google Provider, I added auth to my repo, but when trying to log in through google auth, it's timing out for some reason. ![image]( I even tried with a longer timeout, but still no luck :( ```js providers: […”

Verified against README · Oct 26, 2026 · source

My note

Alternative pages

More in: Authentication & Identity