oidc-provider
The facts below are what the maker publishes about oidc-provider, checked and dated. Our editors have not written about it yet.
Plans and prices
From oidc-provider's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| MIT-licensed library | Free | Node.js authorization server library · features may require configuration |
The facts
Each one read from oidc-provider's own pages, with the date it was checked.
What it does
- Configuration
- The authorization server can be extended and configured for different uses, and not all features are enabled by default.checked 7 Oct 2026
- Experimental features
- FAPI-CIBA, attestation-based client authentication, OAuth Client ID Metadata Documents, and OpenID for Verifiable Credential Issuance are listed as experimental.checked 7 Oct 2026
- Framework integrations
- The provider can be mounted in connect, Express, Fastify, Hapi, and Koa applications.checked 7 Oct 2026
- Intended users
- The security policy describes the library as intended for developers building OAuth 2.0 authorization servers and OpenID Connect providers.checked 7 Oct 2026
- License
- The GitHub repository lists the project under the MIT license.checked 7 Oct 2026
- Protocols
- It implements OAuth 2.0, OpenID Connect, discovery, dynamic client registration, logout, token revocation, PKCE, introspection, device flow, and other specifications.checked 7 Oct 2026
- Purpose
- oidc-provider is an OpenID Certified OAuth 2.0 authorization server implementation for Node.js with OpenID Connect support.checked 7 Oct 2026
- Resource limits
- The security policy says the library does not implement resource limits and applications should provide their own rate limiting and resource management.checked 7 Oct 2026
- Security profiles
- The project lists OpenID Connect certification for FAPI 1.0, FAPI CIBA, and FAPI 2.0 profiles, among others.checked 7 Oct 2026
- Security responsibilities
- Users are responsible for securely storing, managing, and rotating cryptographic keys; storage adapter security depends on the adapter and storage system they choose.checked 7 Oct 2026
- Security updates
- The security policy lists v9.x as supported for security updates and directs vulnerability reports through GitHub Security Advisories.checked 7 Oct 2026
- Support
- The README says the only way to guarantee feedback from the author and sole maintainer is to support the package through GitHub Sponsors.checked 7 Oct 2026
- Token formats
- It supports opaque and JWT access token formats.checked 7 Oct 2026
Alternatives to oidc-provider
- 1
Authgear
Free planOpen sourceAndroidiOSWebAPI8.5$50 usage-based - 2
Ory
Free planOpen sourceWebAPILinuxmacOS8.4From $770 a year - 3
FusionAuth
Free planAndroidiOSWebAPI8.3From $162 a month - 4
Google Cloud Identity
Free planAndroidiOSWebAPI8.3Free plan - 5
Descope
Free planAndroidiOSWebAPI7.6$249 usage-based - 6
Okta Customer Identity Cloud
Free planAndroidiOSWebAPI7.6From $35 a month