Arctic is an OAuth 2.0 library for JavaScript/TypeScript that supports numerous providers. It's light weight, fully-typed, and runtime-agnostic. Read the documentation →

import { GitHub, generateState } from "arctic";

const github = new GitHub(clientId, clientSecret);

const state = generateState();
const authorizationURL = await github.createAuthorizationURL(state, {
	scopes: ["user:email"]
});

const tokens = await github.validateAuthorizationCode(code);

For a flexible OAuth 2.0 client, see oslo/oauth2.

Arctic only supports providers that strictly follow the OAuth 2.0 spec (including PKCE).

Arctic does not strictly follow semantic versioning. While we aim to only introduce breaking changes in major versions, we may introduce them in a minor update if a provider updates their API in a non-backward compatible way. However, they will never be introduced in a patch update.

• 42 School
• Amazon Cognito
• AniList
• Apple
• Atlassian
• Auth0
• Authentik
• Bitbucket
• Box
• Coinbase
• Discord
• Dribbble
• Dropbox
• Facebook
• Figma
• Github
• GitLab
• Google
• Intuit
• Kakao
• Keycloak
• Lichess
• Line
• Linear
• LinkedIn
• Microsoft Entra ID
• MyAnimeList
• Notion
• Okta
• osu!
• Patreon
• Reddit
• Roblox
• Salesforce
• Shikimori
• Slack
• Spotify
• Strava
• Tiltify
• Tumblr
• Twitch
• Twitter
• VK
• WorkOS
• Yahoo
• Yandex
• Zoom