This Node.js SDK eases the integration of Corbado's passkey-first authentication solution.
npm install @corbado/node-sdk
!Latest Stable Version




The Corbado Node SDK provides convenient access to the Corbado Backend API from applications written in Node.js.

:warning: The Corbado Node.js SDK is commonly referred to as a private client, specifically designed for usage within closed backend applications. This particular SDK should exclusively be utilized in such environments, as it is crucial to ensure that the API secret remains strictly confidential and is never shared.
:rocket: Getting started | :hammer_and_wrench: Installation | :books: Advanced | :speech_balloon: Support & Feedback
- Node.js 8 or higher.
Use the following command to install the Corbado Node.js SDK:
``bash`
npm install @corbado/node-sdk
To create a Node.js SDK instance you need to provide your Project ID and API secret which can be found at the Developer Panel.
`JavaScript
const Corbado = require('@corbado/node-sdk');
const projectID = process.env.CORBADO_PROJECT_ID;
const apiSecret = process.env.CORBADO_API_SECRET;
const frontendAPI = process.env.CORBADO_FRONTEND_API;
const backendAPI = process.env.CORBADO_BACKEND_API;
const config = new Corbado.Config(projectID, apiSecret, frontendAPI, backendAPI);
const sdk = new Corbado.SDK(config);
`
`JavaScript
import {SDK, Config} from '@corbado/node-sdk';
const projectID = process.env.CORBADO_PROJECT_ID;
const apiSecret = process.env.CORBADO_API_SECRET;
const frontendAPI = process.env.CORBADO_FRONTEND_API;
const backendAPI = process.env.CORBADO_BACKEND_API;
const config = new Config(projectID, apiSecret, frontendAPI, backendAPI);
const sdk = new SDK(config);
`
- Check Next.js example
- Check Express example
- Check Hono example
- Check integration tests here
The Corbado Node.js SDK provides the following services:
- sessions for managing sessions (examples)identifiers
- for managing identifiers (examples)users
- for managing users (examples)
To use a specific service, such as sessions, invoke it as shown below:
`JavaScript`
corbado.sessions().validateToken(req);
The Corbado Node.js SDK throws exceptions for all errors. The following errors are thrown:
- BaseError for failed assertions and configuration errors (client side)ServerError
- for server errors (server side)
If the Backend API returns a HTTP status code other than 200, the Corbado Node.js SDK throws a ServerError. The ServerErrorclass provides convenient methods to access all important data:
`javascript
try {
// Try to get non-existing user with ID 'usr-123456789'
const user = sdk.users().get('usr-123456789');
} catch (error: ServerError) {
// Show HTTP status code (404 in this case)
console.log(error.getHttpStatusCode());
// Show request ID (can be used in developer panel to look up the full request
// and response, see https://app.corbado.com/app/logs/requests)
console.log(error.getRequestID());
// Show full request data
console.log(error.getRequestData());
// Show runtime of request in seconds (server side)
console.log(error.getRuntime());
// Show validation error messages (server side validation in case of HTTP
// status code 400 (Bad Request))
console.log(error.getValidationMessages());
// Show full error data
console.log(error.getError());
}
``
If you encounter any bugs or have suggestions, please open an issue.
Join our Slack channel to discuss questions or ideas with the Corbado team and other developers.

You can also reach out to us via email at vincent.delitz@corbado.com.
Please report suspected security vulnerabilities in private to security@corbado.com. Please do NOT create publicly viewable issues for suspected security vulnerabilities.