oauth2-worker | Web Worker to handle OAuth2 authentication

oauth2-worker is a JavaScript library. oauth2-worker has no bugs, it has no vulnerabilities and it has low support. However oauth2-worker has a Non-SPDX License. You can download it from GitLab.

A Web Worker to handle OAuth2 authentication flows suitable for use with in Single Page Application (SPA) by storing tokens outside of the main JavaScript Window Global scope. It is generally considered unsafe to use the implicit grant for SPAs but by using a Web Worker as a key vault all tokens can be kept locked away with zero risk of being leaked to any third party JavaScript on the page. This means we can now request and retain the refresh token to allow for long lived sessions that do not require regular user action to re-authenticate. From a developer perspective, requests to HTTP endpoints requiring bearer tokens to access must be pushed through an interface that aims to follow the Fetch API and communicates with the Web Worker to make the request on your behalf which will in turn add the HTTP Authorization header for you.