A lightweight JavaScript client for the InfinityAuth API. It supports signup, login, refresh token rotation, logout, and fetching the current user profile.

Installation

npm install infinityauth

After install, you'll see a notice: "package author: ashutosh0x".

Quick Start

import { createAuthClient } from 'infinityauth';

const auth = createAuthClient({
  baseURL: 'http://localhost:4000',
  clientId: 'your-client-id',
});

// Signup
await auth.signup('user@example.com', 'StrongP@ssw0rd!');

// Login
const { accessToken, refreshToken } = await auth.login('user@example.com', 'StrongP@ssw0rd!');

// Current user
const me = await auth.getUser();

// Refresh
const newTokens = await auth.refreshToken();

// Logout
await auth.logout();

API

createAuthClient(config) returns an AuthClient
- config.baseURL: string (required) – Base URL of InfinityAuth API
- config.clientId: string (required)
- config.clientSecret: string (optional)
- config.storage: 'memory' | 'localStorage' (optional)

AuthClient methods

signup(email, password) → { accessToken, refreshToken, expiresIn }
login(email, password) → { accessToken, refreshToken, expiresIn }
getUser() → { id, email, role } | null
refreshToken() → { accessToken, refreshToken, expiresIn }
logout() → void

Notes

Client stores tokens in memory by default. For browser persistence, pass storage: 'localStorage'.
Ensure your server is configured for CORS and uses RS256 JWTs with a JWKS endpoint.
Never commit private keys; use environment variables in production.