RichardKnop/go-oauth2-server

Health v2 · maintenance only

Adoption not part of the score

2148 stars · 313 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A standalone, specification-compliant OAuth 2.0 authorization server written in Go. It implements the standard grant types (authorization code, implicit, password credentials, client credentials), token refresh, and token introspection, with session storage in PostgreSQL and service discovery via etcd/consul.

Use cases

• run my own oauth2 authorization server
• issue access and refresh tokens for my api
• implement authorization code grant flow
• add client credentials authentication to services
• self-host an rfc 6749 compliant oauth server
• introspect oauth tokens from a resource server

When to choose

• you need a dedicated, spec-compliant OAuth 2.0 authorization server in Go
• you want support for all four standard grant types plus token introspection
• you prefer a standalone service deployable with Docker Compose

When to avoid

• you only need simple session-based login without OAuth2
• you want an all-in-one identity provider with OIDC, SSO, and user management UI
• your stack is not Go-friendly or you need a managed identity service

Facets

service · maturity active

auth http-server api-framework security backend apis web-development go self-hosted windows oauth2 authorization-server access-tokens grant-types token-introspection postgres etcd consul docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="RichardKnop/go-oauth2-server")