A token-based authentication plugin for Aurelia with support for local and social OAuth providers.
Aurelia-auth is a token-based authentication plugin for the Aurelia framework. It enables both local (email/password) and social authentication via OAuth providers like Google and Facebook, storing JWTs in browser storage and automatically attaching them to API requests. It solves the need for a flexible, integrated authentication solution within Aurelia applications.
Aurelia developers building web applications that require user authentication, especially those needing social login integration or token-based security.
Developers choose Aurelia-auth because it's a dedicated, well-integrated plugin for Aurelia that simplifies authentication without imposing UI, offers extensible OAuth configuration, and provides fine-grained control over HTTP client behavior.
:key: Authentication plugin for aurelia
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports multiple social providers like Google and Facebook, and allows easy addition of custom OAuth1/OAuth2 providers via an extensible configuration file, as detailed in the config examples.
Seamlessly integrates with Aurelia Router for authentication-aware routing and uses Aurelia's event aggregator for publishing login/logout events, enabling reactive workflows without extra setup.
Automatically attaches JWT tokens to API requests via an interceptor and supports both localStorage and sessionStorage, giving developers control over token persistence based on security needs.
Allows creation of custom HTTP clients for different endpoints, as shown with the CustomHttpClient example, providing flexibility for services that don't require authentication.
Requires multiple configuration steps including a security config file, plugin registration, and fetch client setup, which can be cumbersome compared to more integrated solutions.
Relies on browser storage for JWTs without built-in handling for token refresh or advanced security features, potentially leaving gaps for applications with strict security requirements.
As a port of the AngularJS Satellizer library, it might inherit outdated practices or lack updates, raising concerns about long-term maintenance and modern authentication standards.