liboauth2 - GitLite

KO | EN

gitlite — search

#javascript #python #react #typescript #go #deep-learning #docker #nodejs #cli #kubernetes #pytorch #mcp #openai #open-source

liboauth2

(★ 137)

OAuth 2.x and OpenID Connect C library

File Explorer

Download Latest Version (.zip)

- - archs.yml
  - build.yml
  - codeql-analysis.yml
  - docs.yml
- - .gitignore
  - apache.h
  - cache.h
  - cfg.h
  - http.h
  - ipc.h
  - jose.h
  - jq.h
  - log.h
  - mem.h
  - nginx.h
  - oauth2.h
  - openidc.h
  - proto.h
  - session.h
  - util.h
  - version.h.in
- .gitignore
- ax_code_coverage.m4
- - .gitignore
  - file.c
  - memcache.c
  - redis.c
  - shm.c
- - .gitignore
  - auth.c
  - cache_cfg.c
  - cfg.c
  - openidc_cfg.c
  - proto_cfg.c
  - session_cfg.c
  - source.c
  - target.c
  - verify.c
- - .gitignore
  - client.c
  - openidc.c
  - provider.c
  - resolver.c
  - state.c
- - .gitignore
  - apache.c
  - nginx.c
- .gitignore
- cache.c
- cache_int.h
- cfg_int.h
- dpop.c
- http.c
- ipc.c
- jose.c
- jose_int.h
- jq.c
- log.c
- mem.c
- oauth2.c
- oauth2_int.h
- openidc_int.h
- proto.c
- session.c
- util.c
- util_int.h
- version.c
- .gitignore
- check_apache.c
- check_cache.c
- check_cfg.c
- check_http.c
- check_ipc.c
- check_jose.c
- check_jq.c
- check_liboauth2.c
- check_liboauth2.h
- check_log.c
- check_mem.c
- check_nginx.c
- check_oauth2.c
- check_openidc.c
- check_proto.c
- check_util.c
- check_version.c
- client.json
- Dockerfile
- http_server.c
- http_server.h
- provider.json
- server_stubs.c
.autotools
.clang-format
.cproject
.dockerignore
.gitignore
.project
AUTHORS
autogen.sh
ChangeLog
configure.ac
Doxyfile
liboauth2.pc.in
liboauth2_apache.pc.in
liboauth2_nginx.pc.in
LICENSE
Makefile.am
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

[![Build Status](https://github.com/OpenIDC/liboauth2/actions/workflows/build.yml/badge.svg)](https://github.com/OpenIDC/liboauth2/actions/workflows/build.yml)
[![Architectures Status](https://github.com/OpenIDC/liboauth2/actions/workflows/archs.yml/badge.svg)](https://github.com/OpenIDC/liboauth2/actions/workflows/archs.yml)
[![CodeQL Analysis](https://github.com/OpenIDC/liboauth2/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/OpenIDC/liboauth2/actions/workflows/codeql-analysis.yml)

# liboauth2
Generic library to build C-based OAuth 2.x and OpenID Connect servers and clients e.g. web-server plugins.

## Overview
- extends [cjose](https://github.com/OpenIDC/cjose) into OAuth 2.x and OpenID Connect specific claims, secrets, and hashes
- adds OAuth 2.x and OpenID Connect protocols by abstracting HTTP requests and responses from web server implementation specifics
- reusable code across other OAuth 2.x and REST related protocols
  e.g. token exchange with endpoint authentication, source token retrieval, target pass settings etc.
- generic code with plugins for Apache, NGINX, and possibly more (e.g. Envoy, HA Proxy, IIS)
- configurable cache backend/size/options per cache element type
- cookie-based session management (i.e. enforce inactivity timeout, expiry)

## Features
- [OpenID Connect 1.0](https://openid.net/specs/openid-connect-core-1_0.html)
- OAuth 2.0 Resource Owner Password Credentials ([RFC 6749](https://tools.ietf.org/html/rfc6749#section-4.3))
- OAuth 2.0 Token Introspection ([RFC 7662](https://tools.ietf.org/html/rfc7662))
- JWT bearer token validation using JWK, JWKS URI, shared symmetric key, X.509 cert, and RSA public key ([RFC 6750](https://tools.ietf.org/html/rfc6750))
- OAuth 2.0 Authorization Server Metadata ([RFC 8414](https://tools.ietf.org/html/rfc8414))
- Proof Key for Code Exchange (PKCE) by OAuth Public Clients ([RFC 7636](https://tools.ietf.org/html/rfc7636))
- OAuth 2.0 Mutual-TLS (MTLS) Certificate-Bound Access Tokens ([RFC 8705](https://tools.ietf.org/html/rfc8705))
- OAuth 2.0 Demonstrating Proof of Possession (DPoP) ([RFC9449](https://tools.ietf.org/html/rfc9449))
- Amazon ALB [EC key URL based `x-amzn-oidc-data` JWT verification](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html)
- endpoint authentication methods: `client_secret_basic`, `client_secret_post`, [`client_secret_jwt`, `private_key_jwt`](https://tools.ietf.org/html/rfc7523), [TLS client certificate](https://tools.ietf.org/id/draft-ietf-oauth-mtls), and HTTP basic authentication
- configurable cache backends: shared memory, file-based, memcache, and Redis
- retrieving a token from a header, a query parameter, a post parameter, or a cookie
- setting a token as a header, a query parameter, a post parameter, or a cookie
- Apache and NGINX bindings

## Dependencies

liboauth2 depends on the following libraries:
- [`openssl`](https://www.openssl.org/) for SSL and crypto support
- [`libcurl`](https://curl.haxx.se/libcurl/) for HTTP client support
- [`jansson`](http://www.digip.org/jansson/) for JSON parsing
- [`cjose`](https://github.com/OpenIDC/cjose) for JSON Object Signing and Encryption (JOSE) support
- (optional) [`libmemcached`](https://libmemcached.org) for memcache cache backend support
- (optional) [`libhiredis`](https://github.com/redis/hiredis) for Redis cache backend support
- (optional) [`Apache 2.x`](https://httpd.apache.org/) for Apache 2.x bindings support
- (optional) [`NGINX`](https://nginx.org) for NGINX bindings support
- (optional, build time only) [`check`](https://libcheck.github.io/check/) for unit test support

## Documentation

The Doxygen API reference for the public headers can be generated with `make doxygen` (requires [`doxygen`](https://www.doxygen.nl/)) and browsed from `doc/html/index.html`. Documenting the headers is a work in progress, see [#11](https://github.com/OpenIDC/liboauth2/issues/11).

Note that the library API is not (yet) stable: liboauth2 is primarily developed as the common engine underneath [`mod_oauth2`](https://github.com/OpenIDC/mod_oauth2), [`mod_sts`](https://github.com/OpenIDC/mod_sts), [`ngx_oauth2_module`](https://github.com/OpenIDC/ngx_oauth2_module), [`ngx_sts_module`](https://github.com/OpenIDC/ngx_sts_module) and [`ngx_openidc_module`](https://github.com/OpenIDC/ngx_openidc_module), which double as its reference consumers, and interfaces may change between releases.

## Support

### Community Support
See [Frequently Asked Questions](https://github.com/OpenIDC/liboauth2/wiki) on the Wiki.  
Ask questions in the [Discussions](https://github.com/OpenIDC/liboauth2/discussions) tracker.

### Commercial Support
For commercial support contracts, professional services, training, and use-case specific support, contact [OpenIDC](https://www.openidc.com) at:
[sales@openidc.com](mailto:sales@openidc.com)

Disclaimer
----------
*This software is open sourced by OpenIDC. For commercial support
you can contact [OpenIDC](https://www.openidc.com) as described above in the [Support](#support) section.*