Lucia

Link: lucia-auth.com

> [!IMPORTANT]
> Lucia v3 will be deprecated by March 2025. Lucia is now a learning resource on implementing auth from scratch. See the announcement for details and migration path. The source code for v3 is available in the v3 branch.

Lucia is an open source project to provide resources on implementing authentication with JavaScript and TypeScript.

The main section is on implementing sessions with your database, library, and framework of choice. Using the API you just created, you can continue learning by going through the tutorials or by referencing one of the fully-fledged examples.

If you have any questions on auth, feel free to ask them in our Discord server or on GitHub Discussions!

Why not a library?

We've found it extremely hard to develop a library that:

1. Supports the many database libraries, ORMs, frameworks, runtimes, and deployment options available in the ecosystem.
2. Provides enough flexibility for the majority of use cases.
3. Does not add significant complexity to projects.

We came to the conclusion that at least for the core of auth - sessions - it's better to teach the code and concepts rather than to try cramming it into a library. The code is very straightforward and shouldn't take more than 10 minutes to write it once you understand it. As an added bonus, it's fully customizable.

Related projects

• The Copenhagen Book: A free online resource covering the various auth concepts in web applications.
• Oslo: Simple, runtime agnostic, and fully-typed packages with minimal dependency for auth and cryptography.
• Arctic: OAuth 2.0 client library with support for 50+ providers.

Disclaimer

All example code in the site is licensed under the Zero-Clause BSD license. You're free to use, copy, modify, and distribute it without any attribution. The license is approved by the Open Source Initiative (OSI) and Google.

Everything else this repository is licensed under the MIT license.

_Copyright © 2024 pilcrow and contributors_

Collapse