Spring security substitute for Node.js

Question

Is there a substitute for spring security in Node.js. I know of express and passport, but passport provides authentication only. It does not feature "forgot password", "reset password" or crud operations for User and Role.

In other words, passport lacks of a number of commonly used features that are provided by spring security. Is there any Node.js library that provides these features.

Answer 1

https://auth0.com

https://stormpath.com

and tons of others. Just google "User Managment" node.js

Or at the end of the day write you own. Writing user management is sails takes about an hour and they have integration with things like Mandril for sending forgotten notices.

Answer 2

I know it's already mentioned in the question but for anyone else brand new to Node coming here from google and skipping right to the answers like I did:

http://www.passportjs.org

Looks like the most widely used free library that is somewhat comparable to Spring Security, although as the original question points out it is only focused on authentication so it doesn't cover every feature Spring Security has (like role based authorization).