express-rate-limit
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
openid-client
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes