oidc-provider
oidc-provider: A configurable Node.js authorization server library for standards-focused teams. Ranked #10 of 33 in OAuth Server Software by our editors (8.4/10); pricing: Open source; best for standards-focused Node.js authorization servers.
At a glance
- Editor score8.4 / 10
- PricingOpen source
- Best forStandards-focused Node.js authorization servers
- Paid fromFree
- OpenID ConnectYes
- Facts checked22 Sep 2026
Where it wins
- Supports OAuth 2.0, OpenID Connect, discovery, and dynamic registration
- Includes PKCE, device, client-credentials, DPoP, and mutual TLS support
- Works with Express, Fastify, Hapi, Koa, Redis, and MongoDB
Where it doesn't
- Requires teams to operate and extend the server themselves
- Not a broad administrative IAM platform
- Features are configurable and not all are enabled by default
Our verdict on oidc-provider
oidc-provider is a free, open-source Node.js library for building OAuth 2.0 authorization servers and OpenID Connect providers. It is aimed at developers and teams that need a configurable server they can self-host, operate, and extend within their own applications. The implementation covers OpenID Connect Core and Discovery, OAuth 2.0 authorization flows, dynamic client registration and management, token introspection, and both opaque and JWT access-token formats.
Its strongest fit is standards-focused application development. oidc-provider includes PKCE, Device Authorization Grant, Client Credentials Grant, DPoP, mutual TLS, and FAPI 1.0 and FAPI 2.0 profiles. That gives teams support for browser, device, machine-to-machine, and higher-assurance authorization scenarios in one Node.js library. It can be mounted in Express, Fastify, Hapi, and Koa applications, with Redis and MongoDB listed among its integration options. These platform choices suit teams already building on the Node.js ecosystem and wanting control over deployment and configuration.
The trade-off is scope and operational responsibility. oidc-provider is a focused server library rather than a broad administrative IAM platform, so teams must handle its integration, configuration, operation, and extension themselves. Its features are configurable, and not all are enabled by default, which makes implementation decisions part of the deployment work. Choose it when your team wants an open-source, self-hosted authorization server with broad OAuth and OpenID Connect protocol coverage. Consider another option if you need a ready-made administrative IAM platform instead of a library designed to be embedded in a Node.js application.
Your product? Our editors can test oidc-provider in depth and publish a review, labelled as paid · from $149/mo →
oidc-provider pricing
oidc-provider fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| OpenID Connect | Yes |
| SAML support | Not verified |
| Self-hosting | Yes |
| Token introspection | Yes |
| Machine-to-machine auth | Yes |
| Deployment model | Self_hosted |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: Express, Fastify, Hapi, Koa, Redis, MongoDB |
| Pricing | Open source |
| Website | oidc-provider.dev |
| Facts checked | 22 Sep 2026 |
oidc-provider integrations
oidc-provider lists 6 integrations on its own site.
- Express
- Fastify
- Hapi
- Koa
- Redis
- MongoDB
Alternatives to oidc-provider
- KeycloakA broad, self-hosted IAM server for standards-based authentication and authorization.9.4
- authentikA broad, self-hosted identity stack for teams that need open-source control.9.2
- WSO2 Identity ServerA broad self-hosted IAM platform for enterprise OAuth, OIDC, SAML, and provisioning needs.9.1
See all oidc-provider alternatives →
Used oidc-provider? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used oidc-provider for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
oidc-provider is listed in our OAuth Server Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/oidc-provider/"><img src="https://www.itechguides.com/best/badge/oidc-provider.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update