OIDC Client Library Matrix

Background

Evaluation of existing OIDC client libraries to select which example apps we should create for our client teams.

We are evaluating on the following criteria:

• Being maintained? - Is the library being currently maintained? Recent commits/publish?
• Meets feature set - Does the library allow teams to perform auth flows? Will it allow for custom KC params? (kc_idp_hint)
• Popularity - How popular is it?
• Open source - Is it Open Source?
• Support for PKCE - Does it support PKCE?
• Works for SPAs - Does the library work for single page applications?
• Comments - Relevant comments

Findings

JavaScript

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
passport-keycloak-bearer	✔	✔	1889 DL/Week	✔	✔	✔
oidc-client-ts	✔	✔	38550 DL/Week	✔	✔	✔
sso-express	✔	✔	127 DL/Week	✔	✔	✔	Being used by some community teams.
openid-client	✔	✔	940475 DL/Week	✔	✔		For Node.js only.
keycloak-js	✔	✔	222218 DL/Week	✔	✔	✔	Keycloak supported in their documentation.

TypeScript

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
oidc-client-ts	✔	✔	38550 DL/Week	✔	✔	✔
sso-express	✔	✔	127 DL/Week	✔	✔	✔	Being used by some community teams. Works for TypeScript.
keycloak-js	✔	✔	222218 DL/Week	✔	✔	✔	Keycloak supported in their documentation. Works for TypeScript.

C#/.Net

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
IdentityModel.OidcClient	✔	✔	N/A		✔

Python

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
JWTConnect-Python-OidcRP	✔	✔	400 DL/Week	✔	✔	✔
pyoidc	✔	✔	N/A	✔	✔	✔

Java

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
Spring Security	✔	✔	N/A (Very popular)	✔	N/A
SpringBoot	✔	✔	N/A (Very popular)	✔	N/A

AngularJS

Library	Being Maintained?	Meets feature set	Popularity	Open source	Support for PKCE	Works for SPAs	Comments
angular-auth-oidc-client	✔	✔	28000 DL/week	✔	✔	✔

Notes

• Libraries being considered which were not maintained are not included in this list.