# openid/AppAuth-Android

Android client SDK for communicating with OAuth 2.0 and OpenID Connect providers.

Repository: https://github.com/openid/AppAuth-Android
Canonical: https://ross.abutalabs.com/products/appauth-android
Homepage: https://openid.github.io/AppAuth-Android
Language: Java
License: Apache-2.0
License Family: permissive
Topics: oauth2, openid-connect, android-sdk
Last push: 2026-03-22T20:54:07+00:00

## Health v2 (maintenance only)
Score: 65/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 73, release rhythm 35, longevity 100
- inputs: {"age_days": 3848, "days_push": 164, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3238, forks 1010 (observed 2026-08-28T04:07:50.388417+00:00)

## What it is
AppAuth for Android is a client SDK for communicating with OAuth 2.0 and OpenID Connect providers from Android apps. It follows RFC 8252 best practices for native apps, using Custom Tabs for authorization and supporting PKCE.

## Use cases
- add oauth2 login to an android app
- implement openid connect authentication on android
- secure native app authorization with pkce
- perform enterprise single sign-on on android
- refresh access tokens in an android client
- integrate with any oauth2 authorization server from a mobile app

## When to choose
- you are building an Android app that needs OAuth 2.0 or OpenID Connect sign-in
- you want RFC 8252-compliant native app auth with Custom Tabs and PKCE
- you need a well-maintained, spec-faithful client SDK rather than hand-rolling protocol flows

## When to avoid
- your authorization server assumes web-based confidential clients with client secrets
- you need authentication on non-Android platforms
- you want embedded WebView-based login, which this library deliberately does not support

## Facets
- artifact type: library
- maturity: active
- function: auth, sdk
- domain: security, mobile-development, apis
- platform: jvm
- tags: oauth2, openid-connect, pkce, custom-tabs, native-apps, sso, android, mobile

## Member repositories
- openid/AppAuth-Android (main) score 65

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:50.388417+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:24:33.154762+00:00, confidence not recorded.
  - readme: https://github.com/openid/AppAuth-Android (fetched 2026-08-28T04:07:50.388417+00:00, sha 326e3e177f0d)
- Data as of 2026-08-30T08:39:29.467469+00:00.