npmpackage.info

Gathering detailed insights and metrics for @auth0/auth0-react

Other packages similar to @auth0/auth0-react

@auth0/nextjs-auth0

4.7.0

Auth0 Next.js SDK

auth0-remix-server

2.3.16

A secure Auth0 integration for server-side Remix apps

react-native-auth0

4.6.0

React Native toolkit for Auth0 API

@saas-ui/auth0

0.3.4

Auth0 authentication for Saas UI

Gathering detailed insights and metrics for @auth0/auth0-react

@auth0/auth0-react - 2.3.0 | npmpackage.info

@auth0/auth0-react

Auth0 SDK for React Single Page Applications (SPA)

2.3.0

953

MIT

TypeScript

15.92 kB

83,161,334 5.2

Installations

npm install @auth0/auth0-react

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.20.4

NPM Version

10.7.0 Score

93.6

Supply Chain

94.4

Quality

84.3

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

23

Total

497

Closed

97

Merged

377

Issues

Open

8

Total

345

Closed

337

Releases

v2.3.0

Updated on Jan 23, 2025

v2.2.4

Updated on Dec 11, 2023

v2.2.3

Updated on Nov 02, 2023

v2.2.2

Updated on Oct 31, 2023

v2.2.1

Updated on Aug 22, 2023

v2.2.0

Updated on Jul 13, 2023

View All 33 releases

Languages

TypeScript

JavaScript

HTML

Shell

TypeScript (87.67%)

JavaScript (7.07%)

HTML (5.17%)

Shell (0.09%)

Developer

auth0

Download Statistics

Total Downloads

83,161,334

Last Day

18,295

Last Week

525,150

Last Month

2,264,426

Last Year

24,265,900

GitHub Statistics

MIT License

953 Stars

512 Commits

281 Forks

27 Watchers

30 Branches

69 Contributors

Updated on Jun 29, 2025

Bundle Size

53.62 kB

Minified

15.92 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 69 Contributors

Package Meta Information

Latest Version

2.3.0

Package Id

@auth0/auth0-react@2.3.0

Unpacked Size

849.88 kB

Size

209.25 kB

File Count

NPM Version

10.7.0

Node Version

18.20.4

Published on

Jan 23, 2025

Total Downloads

Cumulative downloads

Total Downloads

83,161,334

Last Day

10.6%

18,295

Compared to previous day

Last Week

-8.3%

525,150

Compared to previous week

Last Month

-0.9%

2,264,426

Compared to previous month

Last Year

20.3%

24,265,900

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Downloads

📚 Documentation - 🚀 Getting Started - 💻 API Reference - 💬 Feedback

Documentation

Quickstart - our interactive guide for quickly adding login, logout and user information to a React app using Auth0.
Sample App - a full-fledged React application integrated with Auth0.
FAQs - frequently asked questions about the auth0-react SDK.
Examples - code samples for common React authentication scenario's.
Docs site - explore our docs site and learn more about Auth0.

Getting started

Installation

Using npm

1npm install @auth0/auth0-react

Using yarn

1yarn add @auth0/auth0-react

Configure Auth0

Create a Single Page Application in the Auth0 Dashboard.

If you're using an existing application, verify that you have configured the following settings in your Single Page Application:

Click on the "Settings" tab of your application's page.

Scroll down and click on the "Show Advanced Settings" link.

Under "Advanced Settings", click on the "OAuth" tab.

Ensure that "JsonWebToken Signature Algorithm" is set to RS256 and that "OIDC Conformant" is enabled.

Next, configure the following URLs for your application under the "Application URIs" section of the "Settings" page:

Allowed Callback URLs: http://localhost:3000
Allowed Logout URLs: http://localhost:3000
Allowed Web Origins: http://localhost:3000

These URLs should reflect the origins that your application is running on. Allowed Callback URLs may also include a path, depending on where you're handling the callback.

Take note of the Client ID and Domain values under the "Basic Information" section. You'll need these values in the next step.

Configure the SDK

Configure the SDK by wrapping your application in Auth0Provider:

1// src/index.js
2import React from 'react';
3import { createRoot } from 'react-dom/client';
4import { Auth0Provider } from '@auth0/auth0-react';
5import App from './App';
6
7const root = createRoot(document.getElementById('app'));
8
9root.render(
10  <Auth0Provider
11    domain="YOUR_AUTH0_DOMAIN"
12    clientId="YOUR_AUTH0_CLIENT_ID"
13    authorizationParams={{
14      redirect_uri: window.location.origin,
15    }}
16  >
17    <App />
18  </Auth0Provider>
19);

Instructions for React <18

1// src/index.js
2import React from 'react';
3import ReactDOM from 'react-dom';
4import { Auth0Provider } from '@auth0/auth0-react';
5import App from './App';
6
7ReactDOM.render(
8  <Auth0Provider
9    domain="YOUR_AUTH0_DOMAIN"
10    clientId="YOUR_AUTH0_CLIENT_ID"
11    authorizationParams={{
12      redirect_uri: window.location.origin,
13    }}
14  >
15    <App />
16  </Auth0Provider>,
17  document.getElementById('app')
18);

Use the useAuth0 hook in your components to access authentication state (isLoading, isAuthenticated and user) and authentication methods (loginWithRedirect and logout):

1// src/App.js
2import React from 'react';
3import { useAuth0 } from '@auth0/auth0-react';
4
5function App() {
6  const { isLoading, isAuthenticated, error, user, loginWithRedirect, logout } =
7    useAuth0();
8
9  if (isLoading) {
10    return <div>Loading...</div>;
11  }
12  if (error) {
13    return <div>Oops... {error.message}</div>;
14  }
15
16  if (isAuthenticated) {
17    return (
18      <div>
19        Hello {user.name}{' '}
20        <button onClick={() => logout({ logoutParams: { returnTo: window.location.origin } })}>
21          Log out
22        </button>
23      </div>
24    );
25  } else {
26    return <button onClick={() => loginWithRedirect()}>Log in</button>;
27  }
28}
29
30export default App;

For more code samples on how to integrate auth0-react SDK in your React application, have a look at our examples.

API reference

Explore public API's available in auth0-react.

Feedback

Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

Raise an issue

To provide feedback or report a bug, please raise an issue on our issue tracker.

Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

Auth0 Logo

Auth0 is an easy to implement, adaptable authentication and authorization platform. To learn more checkout Why Auth0?

This project is licensed under the MIT license. See the LICENSE file for more info.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

SAST

Determines if the project uses static code analysis.

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 5

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browserstack.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/browserstack.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browserstack.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/browserstack.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/npm-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rl-secure.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/rl-secure.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/semgrep.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snyk.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/snyk.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-react/test.yml/main?enable=pin
Info: 0 out of 14 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 2 third-party GitHubAction dependencies pinned
Info: 2 out of 2 npmCommand dependencies pinned

2

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

5.2

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @auth0/auth0-react

Other packages similar to @auth0/auth0-react

@auth0/auth0-react

Installations

Developer Guide

Yes

CommonJS

18.20.4

10.7.0

Score

Pull Requests

23

497

97

377

Issues

8

345

337

Releases

Languages

Developer

auth0

Download Statistics

GitHub Statistics

Bundle Size

53.62 kB

15.92 kB

Maintainers

Package Meta Information

Total Downloads

83,161,334

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

Documentation

Getting started

Installation

Configure Auth0

Configure the SDK

API reference

Feedback

Contributing

Raise an issue

Vulnerability Reporting

10

10

10

10

10

10

5

2

0

0

0

0

0

5.2

/10