oidc

README

go-oidc

Low-level and strongly typed library for OpenID Connect / OAuth 2.0 client or server written in Go.

Warning
This project is heavily in progress. All interfaces may subject to change. DO NOT USE IN PRODUCTION.

Warning
This is not an official product of YUMEMI Inc.

Features

OAuth 2.0

• Authorization Grant Types
  • Authorization Code Grant
  • Implicit Grant
  • Resource Owner Password Credentials Grant
  • Client Credentials Grant
• Extensions
  • Proof Key for Code Exchange by OAuth Public Clients (PKCE)
  • Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

OpenID Connect 1.0

• Authentication Flows
  • Authorization Code Flow
  • Implicit Flow
  • Hybrid Flow
• Claims
  • Standard Claims
  • Claims Languages and Scripts
  • Userinfo Endpoint
  • Requesting Claims using Scope Values
  • Requesting Claims using the "claims" Request Parameter
  • Claim Types
    • Normal Claims
    • Aggregated Claims
    • Distributed Claims
• Passing Request Parameters as JWTs
  • Passing a Request Object by Value (request)
  • Passing a Request Object by Reference (request_uri)
• Client Authentication
  • client_secret_basic
  • client_secret_post
  • client_secret_jwt
  • private_key_jwt
  • none
• Signatures and Encryption
  • Signing
  • Encryption
• Misc
  • Initiating Login from a Third Party
  • Self-Issued OpenID Provider
  • Pairwise Subject Identifier
  • Offline Access
  • Using Refresh Tokens
• Extensions
  • OpenID Connect Discovery
    • WebFinger
    • Provider Metadata
  • OpenID Connect RP-Initiated Logout
  • OpenID Connect Front-Channel Logout
  • OpenID Connect Back-Channel Logout
  • OpenID Connect Dynamic Client Registration
  • OpenID Connect Session Management
  • OpenID Provider Authentication Policy Extension

Examples

• Server (OpenID Provider)
• Client (Relying Party)