Universal Social AuthSocial login for the browser

OAuth 1.0, OAuth 2.0, and OIDC with PKCE, state checks, and lifecycle hooks. Your backend keeps the client secret.

Get started

Backend recipes

Sponsor

Browser-first

One client instance. Popup or redirect flow. No client secret in the browser.

Secure defaults

PKCE, state validation, and OIDC nonce support. Redirect URIs are checked.

Works with your backend

Recipes for Express, Laravel, Zintrust, and other backends, plus OIDC providers such as Okta, Entra ID, and Keycloak.

Install in seconds

npmpnpmyarn

bash

npm install universal-social-auth axios

bash

pnpm add universal-social-auth axios

bash

yarn add universal-social-auth axios

See it in code

BrowserServer

import axios from 'axios';
import UniversalSocialauth from 'universal-social-auth';

const auth = new UniversalSocialauth(axios, {
  providers: {
    google: {
      url: '/api/auth/google',
      clientId: 'YOUR_PUBLIC_CLIENT_ID',
      redirectUri: `${window.location.origin}/callback`
    }
  }
});

bash

# Your backend exchanges the code and keeps the client secret.
# Pick a recipe for your stack:
#   /docs/recipes/express
#   /docs/recipes/laravel
#   /docs/recipes/zintrust

Add an agent to your app

Using an AI coding agent? Point it at the agent instructions and it will wire universal-social-auth into your project:

text

Add an agent to my app using instructions from https://usa.zintrust.com/agents.md

Built by Zintrust. universal-social-auth is maintained by the team behind zintrust.com. Explore more of our tools, or read the full documentation at usa.zintrust.com.

Ready to ship? Read the getting started guide, browse the backend recipes, or support the project.

Terms · Privacy · Contact

Universal Social AuthSocial login for the browser

Browser-first

Secure defaults

Works with your backend

Install in seconds ​

See it in code ​

Add an agent to your app ​

Install in seconds

See it in code

Add an agent to your app