Browser-first OAuth 2.0 PKCE for modern apps

Docs for a small OAuth PKCE library that stays out of your way.

@mvd/auth gives you a focused client-side OAuth 2.0 Authorization Code Flow with PKCE, optional React hooks, and none of the OIDC kitchen sink you did not ask for.

Install

Add the package and understand the browser-only runtime expectations.

Quick start

Create a shared auth instance and wire up the React hooks in minutes.

Configuration

Review every createAuth option and the OAuth behaviour each one controls.

Popup login

Use a popup-based OAuth flow when you want to avoid a full-page redirect.

What you will find here

Core concepts

Installation, quick start, configuration, and troubleshooting for the base OAuth flow.

API reference

Focused reference pages for createAuth, useAuth, and useAuthRequired.

Framework guides

Practical guidance for popup login flows, typed tokens, and multi-provider setups.

Project scope

Clear boundaries around OAuth PKCE-only behaviour, with OpenID Connect extras intentionally left out.