When doing OIDC, this one seemed like the best option: https://github.com/auth0/express-openid-connect https://github.com/auth0/express-openid-connect Passport

When doing OIDC, this one seemed like the best option: https://github.com/auth0/express-openid-connect https://github.com/auth0/express-openid-connect Passport's auth integrations often seem unmaintained, and I don't really like that passport sends the response for you on failure (which means it's not easy to modify, say, to make the response body JSON instead of text) I'm sure Passport is "reasonably" vetted in that it's still the most popular swiss army auth tool in the node.js ecosystem. But I suspect it's not best-in-class for any one type of auth, and auth is really the type of thing you want to be using best-in-class for. By the way, I'm curious what your process is for code generation.. I'm considering a code-gen solution to a problem right now.