API security requiring clients to use strong authentication, via client assertions (RFC7521, RFC7523)
-
Updated
Apr 2, 2026 - JavaScript
API security requiring clients to use strong authentication, via client assertions (RFC7521, RFC7523)
This project demonstrates how to implement client credentials grant flow in Node.js using client assertion, public-private key pair and a JWKS endpoint in a microservices setup
Passport strategy for authenticating against Azure AD using client certificate (instead of client secret) which is more secure method.
Add a description, image, and links to the client-assertion topic page so that developers can more easily learn about it.
To associate your repository with the client-assertion topic, visit your repo's landing page and select "manage topics."