Overview

Protect Express APIs with MonoCloud access token validation.

Use it to:

• Validate JWT and opaque access tokens
• Protect API routes globally or individually
• Enforce scope and group-based authorization
• Validate mTLS certificate-bound tokens

Install the SDKCopy Anchor Link

Install the SDK using your package manager:

npm install @monocloud/backend-node

View the source on GitHub: monocloud/auth-js

Get started quicklyCopy Anchor Link

Start with the quickstart to see MonoCloud in action:

• Express Quickstart

The quickstart walks you from a new Express app to a protected Express API.

Before you continueCopy Anchor Link

To integrate MonoCloud into your own app:

1. Follow the installation and configuration guide.
2. Use the guides below to secure different parts of your API.

GuidesCopy Anchor Link

• Protect API routes — Protect routes globally or individually with scopes and groups
• Introspect Access Tokens — Validate tokens via the authorization server's introspection endpoint
• Validate mTLS Bound Tokens — mTLS certificate-bound token validation
• Customize the client — Create a custom client to share across middleware instances
• Add a custom cache — Cache introspection results to reduce validation overhead

API ReferenceCopy Anchor Link

View all exported APIs, types, and interfaces:

• Backend Node SDK API Reference