@exortek/auth
A framework-agnostic, zero-dependency authentication toolkit for Node.js — built as 23 small packages under one scope. Pick the one you need, or install the umbrella.
Every package is built directly on node:crypto. Pure JavaScript with
JSDoc → .d.ts. Runs under Express, Fastify, Hono, Elysia.
Shipping
| Package | Version | Reference |
|---|---|---|
@exortek/crypto | 1.0.0 | /crypto |
The stack
Numbers reflect dependency order — a lower number never imports from a higher one, so you can adopt one package at a time.
| # | Package | What it does |
|---|---|---|
| 01 | @exortek/crypto | crypto primitives — the foundation the rest builds on |
| 02 | @exortek/password | Argon2id / bcrypt, strength scoring, HIBP breach check |
| 03 | @exortek/otp | TOTP / HOTP, backup codes, QR provisioning URI |
| 04 | @exortek/challenge | e-mail / SMS one-time code storage + verification |
| 05 | @exortek/jwk | JWK ↔ PEM ↔ DER converters, key rotation |
| 06 | @exortek/jws | JOSE signed payloads (compact + JSON) |
| 07 | @exortek/jwt | JWT sign / verify with algorithm allowlists, clock skew |
| 08 | @exortek/jwe | JWE encrypted payloads (RSA-OAEP, A256KW, dir) |
| 09 | @exortek/jwks | JWKS URI fetching, caching, kid rotation |
| 10 | @exortek/session | signed cookies, rotation, revocation, store adapter |
| 11 | @exortek/csrf | double-submit + signed origin-bound tokens |
| 12 | @exortek/rate-limit | token bucket, sliding window, per-IP / per-user |
| 13 | @exortek/device | device fingerprinting, trusted-device tokens |
| 14 | @exortek/apikey | prefixed API keys (sk_live_...), rate-limited by default |
| 15 | @exortek/magic-link | passwordless email / SMS link tokens |
| 16 | @exortek/passkey | WebAuthn / FIDO2 (server + browser client) |
| 17 | @exortek/opaque | OPAQUE (aPAKE) — zero-knowledge password auth |
| 18 | @exortek/paseto | PASETO v4 (local / public) |
| 19 | @exortek/oauth2 | OAuth 2.1 client (PKCE) + provider presets |
| 20 | @exortek/oidc | OpenID Connect on top of oauth2 |
| 21 | @exortek/web3-evm | SIWE — Sign-In With Ethereum |
| 22 | @exortek/web3-solana | SIWS — Sign-In With Solana |
| 23 | @exortek/auth | umbrella — re-exports every package above |
Install
npm install @exortek/cryptoNode.js 22 or newer. No runtime dependencies.
Where to next
@exortek/cryptoreference → — every export, every option, every edge case for the package shipping today.- Source — GitHub repo.
- Contributing — branch prefixes, commit conventions, changeset flow.
Last updated on