npmpackage.info

Gathering detailed insights and metrics for auth0-spa-js

Other packages similar to auth0-spa-js

@auth0/auth0-spa-js

2.2.0

Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE

@oqton/auth0-spa-js

2.0.4-3

Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE

@ctx-core/auth0-spa-solid

1.0.11

Auth0 solid-js components & ctx-core integration for progressive web apps

@afroze9/solid-auth0

0.2.0

A wrapper on top of auth0-spa-js for solidjs.

Gathering detailed insights and metrics for auth0-spa-js

auth0-spa-js - 1.6.5 | npmpackage.info

auth0-spa-js

Auth0 authentication for Single Page Applications (SPA) with PKCE

1.6.5

957

MIT

TypeScript

32.50 kB

136,433 6.8

Installations

npm install auth0-spa-js

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, UMD

Node Version

8.16.0

NPM Version

6.4.1 Score

47.4

Supply Chain

91.5

Quality

82.8

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

25

Total

859

Closed

154

Merged

680

Issues

Open

6

Total

502

Closed

496

Releases

v2.2.0

Updated on May 29, 2025

v2.1.3

Updated on Dec 11, 2023

v2.1.2

Updated on Aug 21, 2023

v2.1.1

Updated on Jul 19, 2023

v2.1.0

Updated on Jul 13, 2023

v2.0.8

Updated on Jun 14, 2023

View All 80 releases

Languages

TypeScript

JavaScript

HTML

TypeScript (59.89%)

JavaScript (31.71%)

HTML (8.4%)

Developer

auth0

Download Statistics

Total Downloads

136,433

Last Day

Last Week

564

Last Month

2,207

Last Year

18,974

GitHub Statistics

MIT License

957 Stars

770 Commits

383 Forks

32 Watchers

32 Branches

93 Contributors

Updated on Jul 04, 2025

Bundle Size

103.25 kB

Minified

32.50 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 93 Contributors

Package Meta Information

Latest Version

1.6.5

Package Id

auth0-spa-js@1.6.5

Unpacked Size

6.54 kB

Size

2.57 kB

File Count

NPM Version

6.4.1

Node Version

8.16.0

Published on

Jan 24, 2020

Total Downloads

Cumulative downloads

Total Downloads

136,433

Last Day

Compared to previous day

Last Week

37.9%

564

Compared to previous week

Last Month

46.8%

2,207

Compared to previous month

Last Year

-6.5%

18,974

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@auth0/auth0-spa-js

Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE.

Documentation
Installation
Getting Started
Contributing
Support + Feedback
Frequently Asked Questions
Vulnerability Reporting
What is Auth0
License

Documentation

Installation

From the CDN:

1<script src="https://cdn.auth0.com/js/auth0-spa-js/1.2/auth0-spa-js.production.js"></script>

Using npm:

1npm install @auth0/auth0-spa-js

Using yarn:

1yarn add @auth0/auth0-spa-js

Getting Started

Creating the client

Create an Auth0Client instance before rendering or initializing your application. You should only have one instance of the client.

1import createAuth0Client from '@auth0/auth0-spa-js';
2
3//with async/await
4const auth0 = await createAuth0Client({
5  domain: '<AUTH0_DOMAIN>',
6  client_id: '<AUTH0_CLIENT_ID>',
7  redirect_uri: '<MY_CALLBACK_URL>'
8});
9
10//with promises
11createAuth0Client({
12  domain: '<AUTH0_DOMAIN>',
13  client_id: '<AUTH0_CLIENT_ID>',
14  redirect_uri: '<MY_CALLBACK_URL>'
15}).then(auth0 => {
16  //...
17});

1 - Login

1<button id="login">Click to Login</button>

1//with async/await
2
3//redirect to the Universal Login Page
4document.getElementById('login').addEventListener('click', async () => {
5  await auth0.loginWithRedirect();
6});
7
8//in your callback route (<MY_CALLBACK_URL>)
9window.addEventListener('load', async () => {
10  const redirectResult = await auth0.handleRedirectCallback();
11  //logged in. you can get the user profile like this:
12  const user = await auth0.getUser();
13  console.log(user);
14});
15
16//with promises
17
18//redirect to the Universal Login Page
19document.getElementById('login').addEventListener('click', () => {
20  auth0.loginWithRedirect().catch(() => {
21    //error while redirecting the user
22  });
23});
24
25//in your callback route (<MY_CALLBACK_URL>)
26window.addEventListener('load', () => {
27  auth0.handleRedirectCallback().then(redirectResult => {
28    //logged in. you can get the user profile like this:
29    auth0.getUser().then(user => {
30      console.log(user);
31    });
32  });
33});

2 - Calling an API

1<button id="call-api">Call an API</button>

1//with async/await
2document.getElementById('call-api').addEventListener('click', async () => {
3  const accessToken = await auth0.getTokenSilently();
4  const result = await fetch('https://myapi.com', {
5    method: 'GET',
6    headers: {
7      Authorization: `Bearer ${accessToken}`
8    }
9  });
10  const data = await result.json();
11  console.log(data);
12});
13
14//with promises
15document.getElementById('call-api').addEventListener('click', () => {
16  auth0
17    .getTokenSilently()
18    .then(accessToken =>
19      fetch('https://myapi.com', {
20        method: 'GET',
21        headers: {
22          Authorization: `Bearer ${accessToken}`
23        }
24      })
25    )
26    .then(result => result.json())
27    .then(data => {
28      console.log(data);
29    });
30});

3 - Logout

1<button id="logout">Logout</button>

1import createAuth0Client from '@auth0/auth0-spa-js';
2
3document.getElementById('logout').addEventListener('click', () => {
4  auth0.logout();
5});

Contributing

We appreciate feedback and contribution to this repo! Before you get started, please see the following:

Support + Feedback

This SDK is in Early Access with selected stakeholders.

We process feedback and provide support via private channels.

Frequently Asked Questions

For a rundown of common issues you might encounter when using the SDK, please check out the FAQ.

Vulnerability Reporting

Please do not report security vulnerabilities on the public GitHub issue tracker. The Responsible Disclosure Program details the procedure for disclosing security issues.

What is Auth0?

Auth0 helps you to easily:

implement authentication with multiple identity providers, including social (e.g., Google, Facebook, Microsoft, LinkedIn, GitHub, Twitter, etc), or enterprise (e.g., Windows Azure AD, Google Apps, Active Directory, ADFS, SAML, etc.)
log in users with username/password databases, passwordless, or multi-factor authentication
link multiple user accounts together
generate signed JSON Web Tokens to authorize your API calls and flow the user identity securely
access demographics and analytics detailing how, when, and where users are logging in
enrich user profiles from other data sources using customizable JavaScript rules

Why Auth0?

License

This project is licensed under the MIT license. See the LICENSE file for more info.

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

SAST

Determines if the project uses static code analysis.

9

Maintained

Determines if the project is "actively maintained".

6

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browserstack.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/browserstack.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/npm-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rl-secure.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/rl-secure.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/semgrep.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/semgrep.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snyk.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/snyk.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/auth0/auth0-spa-js/test.yml/main?enable=pin
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 2 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.8

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to auth0-spa-js

Other packages similar to auth0-spa-js

auth0-spa-js

Installations

Developer Guide

Yes

CommonJS, UMD

8.16.0

6.4.1

Score

Pull Requests

25

859

154

680

Issues

6

502

496

Releases

Languages

Developer

auth0

Download Statistics

GitHub Statistics

Bundle Size

103.25 kB

32.50 kB

Maintainers

Package Meta Information

Total Downloads

136,433

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@auth0/auth0-spa-js

Table of Contents

Documentation

Installation

Getting Started

Creating the client

1 - Login

2 - Calling an API

3 - Logout

Contributing

Support + Feedback

Frequently Asked Questions

Vulnerability Reporting

What is Auth0?

License

10

10

10

10

10

10

9

6

5

3

0

0

0

6.8

/10