tiny-is : A fun project where I'm building a light-weight framework that provides implementations of the OAuth 2.1 and OpenID Connect 1.0 specifications and other related specifications. The framework follows the OAuth 2.0 Security Best Current Practice

Stack:

• Golang
• SQLite
• HTMX

Run Locally:

• Create sqlite database

make create_db

• Generate Keys

make generate_jwt_key
make generate_server_keypair

• Run the server

make run

OAuth2.1

• Authorization Code Grant with PKCE
  • Only support with PKCE for better security
• Refresh Token Grant
• Client Credentials Grant
• Authorization Server Metadata

Token Management

• JWT access and refresh tokens (EdDSA)
• Token revocation

User Management:

• Add users
• Basic user authentication

Application Management:

• Basic application management (client_id, client_secret, redirect_uris, grant_types)

Session

• in-memory session storage