zmartzone/lua-resty-openidc

Health v2 · maintenance only

Adoption not part of the score

1073 stars · 254 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Lua library for NGINX/OpenResty implementing an OpenID Connect Relying Party and OAuth 2.0 Resource Server. It authenticates users via OpenID Connect Discovery and validates OAuth 2.0 bearer tokens, enabling reverse proxies to protect origin services without native auth support.

Use cases

• add OpenID Connect login to an NGINX reverse proxy
• protect backend APIs with OAuth 2.0 bearer token validation
• validate JWT access tokens at the gateway
• terminate authentication in front of legacy origin servers
• introspect opaque access tokens against an authorization server
• manage authenticated user sessions in cookies, redis, or memcache

When to choose

• you run NGINX or OpenResty and need standards-based OIDC/OAuth2 at the proxy layer
• your origin servers cannot implement OpenID Connect themselves
• you need OpenID certified Relying Party behavior with discovery and code flow
• you want flexible session storage (cookie, shared memory, memcache, redis)

When to avoid

• you are not using NGINX/OpenResty as your gateway
• you need a full identity provider rather than a relying party/resource server
• you prefer application-level auth handled inside your app framework
• you need OAuth flows beyond the authorization code and bearer token use cases

Facets

library · maturity stable

auth authorization middleware http-server security web-development apis backend lua openid-connect oauth2 jwt reverse-proxy nginx-lua session-management identity nginx openresty linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="zmartzone/lua-resty-openidc")