Sumor OAuth Framework

Sumor is an OAuth 2.0 authentication framework primarily designed for Express.js applications, offering a comprehensive solution for integrating OAuth, managing tokens, and securing routes with built-in Role-Based Access Control (RBAC). The current stable version is 3.3.4. It appears to be actively maintained with regular updates, featuring full Authorization Code flow, secure HTTP-only Cookie-based token refresh, and JWKS-based JWT validation. A key differentiator is its dynamic permission synchronization with the OAuth provider, full TypeScript support, a 'mock mode' for local development without a real OAuth service, and a separate client-side SDK for browser applications, making it suitable for multi-service architectures. It simplifies OAuth integration, token management, and permission-based routing into out-of-the-box middleware and utility functions.