# NOAuth

> Identify OAuth flows and vulnerabilities

Canonical page: [https://chrome-stats.com/d/noauth](https://chrome-stats.com/d/noauth)

## Overview

- **ID:** `noauth`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Hacks and Hops
- **Category:** web-development,privacy-security
- **Daily users:** 16
- **Weekly downloads:** 2
- **Version:** 1.5.0
- **Last updated:** 2025-05-16
- **First published:** 2025-05-08
- **Size:** 82 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/noauth/)
- **Website:** [https://github.com/ACK-J/NOAuth](https://github.com/ACK-J/NOAuth)

## Description

<strong>Code</strong>
This addon is free and open-source software (FOSS) all code can be found here:
<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/03ef31f20a432baae22c323782cb37cbdfe2d3e32968d227a7201a1cfb483684/https%3A//github.com/ACK-J/NOAuth" rel="nofollow">https://github.com/ACK-J/NOAuth</a>
Please report your bugs or feature requests in a GitHub issue instead of in a review.

<strong>What does this addon do?</strong>
1. Passively identifies oauth flows
2. Checks for interesting parameters supported
3. Checks for open redirects in the redirect_uri parameter
4. Verifies server side validation of the state parameter
5. Checks for and parses the OpenID configuration

<strong>Donations</strong>
<ul><li>Monero Address: <strong>89jYJvX3CaFNv1T6mhg69wK5dMQJSF3aG2AYRNU1ZSo6WbccGtJN7TNMAf39vrmKNR6zXUKxJVABggR4a8cZDGST11Q4yS8</strong></li></ul>
<strong>Privacy</strong>
All checks are performed within your browser.

## Rankings

- #28,074 — Overall
- #58 — identify

## Permissions and access

### Permissions

- `tabs`
- `webRequest`
- `webRequestBlocking`
- `storage`
- `activeTab`
- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [OAuth 2.0 Implicit Flow Detector](https://chrome-stats.com/d/implicit-flow-detector) — 79 users
- [JSONPeek](https://chrome-stats.com/d/jsonpeek) — 19 users
- [Password Leak Monitor](https://chrome-stats.com/d/password-leak-monitor) — 42 users, 4.00 / 5
- [PP Authorizer](https://chrome-stats.com/d/pp-authorizer) — 1 users
- [Endpoint Security Checker](https://chrome-stats.com/d/endpoint-security-checker) — 2 users
- [Opener Detector](https://chrome-stats.com/d/opener-detector)
- [NoHTTP - Librefox MoD For Tor](https://chrome-stats.com/d/nohttp-librefox-mod-for-tor)
- [Mozilla IAM Site Checker](https://chrome-stats.com/d/mozilla-iam-site-checker) — 5 users, 5.00 / 5
- [Hacktoberfest Detector](https://chrome-stats.com/d/hacktoberfest-detector)
- [Port Authority](https://chrome-stats.com/d/port-authority) — 26,717 users, 4.65 / 5
- [authifyNow](https://chrome-stats.com/d/authifynow) — 4.00 / 5
- [OF-DL Auth Helper](https://chrome-stats.com/d/of-dl-auth-helper)

---

Source: [Chrome-Stats](https://chrome-stats.com/d/noauth)