npmpackage.info

Gathering detailed insights and metrics for @auth0/auth0-spa-js

Other packages similar to @auth0/auth0-spa-js

@afroze9/solid-auth0

0.2.0

A wrapper on top of auth0-spa-js for solidjs.

@oqton/auth0-spa-js

2.0.4-3

Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE

auth0-spa-js

1.6.5

Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE

@ctx-core/auth0-spa-solid

1.0.11

Auth0 solid-js components & ctx-core integration for progressive web apps

Gathering detailed insights and metrics for @auth0/auth0-spa-js

@auth0/auth0-spa-js - 2.2.0 | npmpackage.info

@auth0/auth0-spa-js

Auth0 authentication for Single Page Applications (SPA) with PKCE

2.2.0

957

MIT

TypeScript

13.65 kB

140,758,629 6.8

Installations

npm install @auth0/auth0-spa-js

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.20.8

NPM Version

10.8.2 Score

99.1

Supply Chain

100

Quality

86.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

26

Total

855

Closed

151

Merged

678

Issues

Open

6

Total

502

Closed

496

Releases

v2.2.0

Updated on May 29, 2025

v2.1.3

Updated on Dec 11, 2023

v2.1.2

Updated on Aug 21, 2023

v2.1.1

Updated on Jul 19, 2023

v2.1.0

Updated on Jul 13, 2023

v2.0.8

Updated on Jun 14, 2023

View All 80 releases

Languages

TypeScript

JavaScript

HTML

TypeScript (59.89%)

JavaScript (31.71%)

HTML (8.4%)

Developer

auth0

Download Statistics

Total Downloads

140,758,629

Last Day

28,777

Last Week

872,805

Last Month

3,767,355

Last Year

41,095,519

GitHub Statistics

MIT License

957 Stars

763 Commits

382 Forks

32 Watchers

33 Branches

92 Contributors

Updated on Jun 25, 2025

Bundle Size

44.57 kB

Minified

13.65 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 92 Contributors

Package Meta Information

Latest Version

2.2.0

Package Id

@auth0/auth0-spa-js@2.2.0

Unpacked Size

1.23 MB

Size

327.67 kB

File Count

NPM Version

10.8.2

Node Version

18.20.8

Published on

May 29, 2025

Total Downloads

Cumulative downloads

Total Downloads

140,758,629

Last Day

0.9%

28,777

Compared to previous day

Last Week

-8.3%

872,805

Compared to previous week

Last Month

-1.1%

3,767,355

Compared to previous month

Last Year

22.5%

41,095,519

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Release Downloads CircleCI

📚 Documentation - 🚀 Getting Started - 💻 API Reference - 💬 Feedback

Documentation

Quickstart - our interactive guide for quickly adding login, logout and user information to your app using Auth0.
Sample app - a full-fledged sample app integrated with Auth0.
FAQs - frequently asked questions about auth0-spa-js SDK.
Examples - code samples for common scenarios.
Docs Site - explore our Docs site and learn more about Auth0.

Getting Started

Installation

Using npm in your project directory run the following command:

1npm install @auth0/auth0-spa-js

From the CDN:

1<script src="https://cdn.auth0.com/js/auth0-spa-js/2.2/auth0-spa-js.production.js"></script>

Configure Auth0

Create a Single Page Application in the Auth0 Dashboard.

If you're using an existing application, verify that you have configured the following settings in your Single Page Application:

Click on the "Settings" tab of your application's page.

Scroll down and click on the "Show Advanced Settings" link.

Under "Advanced Settings", click on the "OAuth" tab.

Ensure that "JsonWebToken Signature Algorithm" is set to RS256 and that "OIDC Conformant" is enabled.

Next, configure the following URLs for your application under the "Application URIs" section of the "Settings" page:

Allowed Callback URLs: http://localhost:3000
Allowed Logout URLs: http://localhost:3000
Allowed Web Origins: http://localhost:3000

These URLs should reflect the origins that your application is running on. Allowed Callback URLs may also include a path, depending on where you're handling the callback (see below).

Take note of the Client ID and Domain values under the "Basic Information" section. You'll need these values in the next step.

Configure the SDK

Create an Auth0Client instance before rendering or initializing your application. You should only have one instance of the client.

1import { createAuth0Client } from '@auth0/auth0-spa-js';
2
3//with async/await
4const auth0 = await createAuth0Client({
5  domain: '<AUTH0_DOMAIN>',
6  clientId: '<AUTH0_CLIENT_ID>',
7  authorizationParams: {
8    redirect_uri: '<MY_CALLBACK_URL>'
9  }
10});
11
12//or, you can just instantiate the client on its own
13import { Auth0Client } from '@auth0/auth0-spa-js';
14
15const auth0 = new Auth0Client({
16  domain: '<AUTH0_DOMAIN>',
17  clientId: '<AUTH0_CLIENT_ID>',
18  authorizationParams: {
19    redirect_uri: '<MY_CALLBACK_URL>'
20  }
21});
22
23//if you do this, you'll need to check the session yourself
24try {
25  await auth0.getTokenSilently();
26} catch (error) {
27  if (error.error !== 'login_required') {
28    throw error;
29  }
30}

Logging In

You can then use login using the Auth0Client instance you created:

1<button id="login">Click to Login</button>

1//redirect to the Universal Login Page
2document.getElementById('login').addEventListener('click', async () => {
3  await auth0.loginWithRedirect();
4});
5
6//in your callback route (<MY_CALLBACK_URL>)
7window.addEventListener('load', async () => {
8  const redirectResult = await auth0.handleRedirectCallback();
9  //logged in. you can get the user profile like this:
10  const user = await auth0.getUser();
11  console.log(user);
12});

For other comprehensive examples, see the EXAMPLES.md document.

API Reference

Explore API Methods available in auth0-spa-js.

Feedback

Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

Raise an issue

To provide feedback or report a bug, please raise an issue on our issue tracker.

Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

What is Auth0?

Auth0 Logo

Auth0 is an easy to implement, adaptable authentication and authorization platform. To learn more checkout Why Auth0?

This project is licensed under the MIT license. See the LICENSE file for more info.

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

SAST

Determines if the project uses static code analysis.

9

Maintained

Determines if the project is "actively maintained".

6

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browserstack.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/browserstack.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/npm-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rl-secure.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/rl-secure.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/semgrep.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snyk.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/snyk.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 2 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.8

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @auth0/auth0-spa-js

Other packages similar to @auth0/auth0-spa-js

@auth0/auth0-spa-js

Installations

Developer Guide

Yes

CommonJS

18.20.8

10.8.2

Score

Pull Requests

26

855

151

678

Issues

6

502

496

Releases

Languages

Developer

auth0

Download Statistics

GitHub Statistics

Bundle Size

44.57 kB

13.65 kB

Maintainers

Package Meta Information

Total Downloads

140,758,629

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

Documentation

Getting Started

Installation

Configure Auth0

Configure the SDK

Logging In

API Reference

Feedback

Contributing

Raise an issue

Vulnerability Reporting

What is Auth0?

10

10

10

10

10

10

9

6

5

3

0

0

0

6.8

/10