StampOAuth 2.0 for NestJS

Add the Authorization Code + PKCE flow to your app. Keep your own database, users and JWTs.

Get started

API reference

GitHub

Authorization Code + PKCE

Follows RFC 6749 and RFC 7636 with S256. Works for SPAs, mobile apps and backends.

Bring your own database

Plug in a client store and a code store. Use Prisma, TypeORM, Mongoose, Redis or plain memory.

Your JWTs, your way

You build the token payload and sign it. Add roles, email, tenant id, anything.

Standard errors

Returns real OAuth errors like invalid_client and invalid_grant, with the right shape.

Public and confidential clients

Public clients use PKCE. Confidential clients also send a secret, checked with your hash.

NestJS 11 and 12

One module, two endpoints. Register it and you are done.

Quick look

import { Module } from "@nestjs/common";
import { StampModule } from "@zaki-goumri-2/stamp";

@Module({
  imports: [
    StampModule.forRootAsync({
      imports: [StoresModule],
      clientStore: ClientStore,
      codeStore: CodeStore,
      jwtSigner: TokenSigner,
      loginPagePath: "/auth/login",
      resolveUserId: (req) => req.user?.id,
    }),
  ],
})
export class AppModule {}

Your app now has:

Method	Path	What it does
GET	`/authorize`	Checks the client and sends back a code
POST	`/token`	Swaps the code for an access token

Install

Install it from npm:

bash

npm install @zaki-goumri-2/stamp

Then follow the getting started guide.