azuread/microsoft-authentication-library-for-js

Microsoft Authentication Library (MSAL) for JS

View on GitHub ↗Jump to charts ↓Open shareable report

Summary Information

Updated 4 minutes ago
Type:Library / SDKCategory(s):Identity, Auth & SecretsSecurity & Privacy
Added to GitGenius on September 16th, 2026
Created on February 24th, 2017
Open Issues & Pull Requests: 208 (+0)
GitHub issues: Enabled
Number of forks: 2,722
Total Stargazers: 4,121 (+0)
Total Subscribers: 127 (+0)

Repository Insights (GitGenius)

Median issue/PR response: 20.3 hours
Mean response time: 28.4 days
90th percentile: 77.1 days
Tracked items: 412

Most active contributors

Sign in to see contributor activity.

How this project is maintained

Roughly one issue in five opened in the past year never receives a reply. 96% of open issues come from outside the core team, so the backlog reflects real-world use rather than internal planning. Work labelled "msal-node" is answered fastest, typically in about 6 hours, while "Needs: Attention :wave:" waits about 6 days. 77% of issues opened in the past year have been closed, leaving a working backlog. Three people close 62% of everything that gets resolved.

Charts & Analytics

Fetching additional details & charts...

Issue Activity (beta)

Open issues: 114
New in 7 days: 3
Closed in 7 days: 0
Avg open age: 631 days
Stale 30+ days: 102
Stale 90+ days: 90

Recent activity

Opened in 7 days: 3
Closed in 7 days: 0
Comments in 7 days: 0
Events in 7 days: 7

Top labels

  • question (371)
  • msal-browser (350)
  • public-client (345)
  • bug-unconfirmed (256)
  • msal-angular (132)
  • msal-react (130)
  • Needs: Attention :wave: (93)
  • msal-node (84)

Detailed Description

Microsoft Authentication Library for JS is an authentication SDK that enables JavaScript applications to authenticate users and acquire tokens for calling Microsoft APIs.

The library solves the problem of integrating Azure Active Directory authentication into web and mobile applications built with JavaScript. It handles the OAuth 2.0 and OpenID Connect flows required for user sign-in and token acquisition, abstracting away the complexity of implementing these protocols directly. The tool supports multiple application types including single-page applications, server-side web applications, and native mobile apps through platform-specific implementations.

Developers should adopt this library when building applications that need to authenticate users against Azure Active Directory or Microsoft accounts and call Microsoft Graph or other protected APIs. It suits projects ranging from simple web apps to complex enterprise applications that require conditional access, multi-tenant support, or advanced security features. The library provides different packages optimized for different scenarios: a browser-based implementation for single-page applications, a Node.js implementation for server-side authentication, and implementations for React Native and Electron applications.

The project maintains active development with regular updates addressing security concerns and adding support for new authentication scenarios. The codebase shows consistent attention to TypeScript quality and type safety across its implementations. The team responds to issues and pull requests with engagement on authentication-related edge cases and integration challenges. Documentation is actively maintained to reflect API changes and new capabilities. The project demonstrates commitment to supporting multiple JavaScript runtime environments and frameworks through dedicated packages rather than a one-size-fits-all approach.