AuthCare

Enterprise-grade, modular authentication for Express applications.

[!WARNING] ⚠️ Alpha Release (v0.1.0-alpha) AuthCare is currently in active developer alpha. The public API may evolve based on early community feedback. Not recommended for production deployment until v1.0.0.

Features

• ✅ Email & Password Authentication: Argon2 hashing by default.
• ✅ Google OAuth: Verified with Google JWKS, signature, audience, state, and nonce checks.
• ✅ Session Management: Cryptographically blind refresh tokens & __Host- cookie prefixes.
• ✅ Decoupled Architecture: Pluggable JWT, password hashing, loggers, and lifecycle hooks.
• ✅ PostgreSQL Native: Automated versioned database migrations (001_users.sql, 002_oauth.sql, 003_sessions.sql).

10-Second Quick Start

1. Install

npm install @authcare/express @authcare/core

2. Setup Express App

import express from 'express';
import { createAuth } from '@authcare/express';

const app = express();
app.use(express.json());

const auth = createAuth({
    database: {
        connectionString: process.env.DATABASE_URL!
    },
    jwt: {
        secret: process.env.JWT_SECRET!,
        expiresIn: 900 // 15 mins
    },
    cors: {
        allowedOrigins: ['http://localhost:3000']
    }
});

app.use('/api/auth', auth.router());

app.listen(3000, () => console.log('AuthCare running on port 3000'));

CLI Tooling

Diagnose your setup automatically:

npx @authcare/cli doctor

Security & Governance

• Security Policy
• Contributing Guidelines
• Code of Conduct
• Roadmap

License

AuthCare is MIT Licensed.