distributed-oidc-client-raw

Documentation

Overview

Example: connecting to a hypercache-server cluster as a backend service, authenticating via OIDC client_credentials, and exercising the full client API surface.

This is a runnable demo, not production-grade code. The goal is to show:

1. How a service obtains an OIDC access token (no human-in-the-loop) using the standard golang.org/x/oauth2/clientcredentials flow.
2. How the token is automatically attached to every cache request via oauth2.NewClient's transport wrapper — there's no manual header bookkeeping.
3. How GET /v1/me lets the client introspect the bound identity before doing real work (canary: "is my token actually valid against this cluster?").
4. The PUT / GET / DELETE / batch surface against /v1/cache/*.

See README.md in this directory for setup instructions (env vars, IdP setup, scope mapping).