markbates/goth
Goth
Goth is a Go library that provides a consistent, provider-agnostic interface for authenticating users through dozens of third-party OAuth and OAuth2 services. It defines a pluggable provider interface and a central registry where providers are registered by name, enabling dynamic lookup and invocation during authentication flows. The library manages the multi-step OAuth authorization process by generating redirect URLs and validating callback responses, and returns a standardized user profile with common fields like email, name, and avatar URL across all supported providers.
The library distinguishes itself through its extensible architecture, allowing developers to implement a custom provider interface to add authentication support for any third-party OAuth service not included by default. It handles session state management between requests using encrypted cookies with configurable security attributes, including HTTP-only, secure, and domain-scoped settings. Goth also supports token refresh, enabling applications to obtain new access tokens using refresh tokens when the original token expires.
The project provides runtime provider registry management, allowing developers to add, retrieve, and clear authentication providers dynamically. Session storage can be customized with settings such as expiry, path, and security flags for production use. The library is distributed as a Go package with documentation covering installation and provider configuration.
Features
- Authentication Provider Architectures - An extensible system where new authentication providers can be added by implementing a simple interface without modifying core logic.
- OAuth Provider Registrations - Providers are registered by name into a central store, enabling dynamic lookup and invocation during authentication flows.
- Provider Registries - Add, retrieve, and clear authentication providers at runtime for flexible provider management.
- Custom Authentication Providers - Implement a Provider interface to add authentication support for any third-party OAuth or OAuth2 service not included by default.
- Client-Side Flow Managers - Managing the authorization process by generating authentication URLs and validating responses from providers.
- Client-Side Flow Orchestrations - Manages the multi-step OAuth authorization process by generating redirect URLs and validating callback responses.
- Session Cookie Security - Authentication state is persisted between requests using encrypted cookies with configurable security attributes.
- OAuth Providers - Provides a consistent interface for authenticating users through dozens of third-party OAuth providers.
- Custom Provider Implementations - Implementing a custom interface for any third-party authentication service to handle authorization and user data retrieval.
- OAuth Session Tracking - Generate authentication URLs and validate responses from providers to manage the authorization process.
- Multi-Provider Authentication - Ships a unified authentication interface supporting dozens of third-party OAuth and OAuth2 providers.
- OAuth Profile Normalizers - Retrieving a normalized user profile with common fields plus raw provider data from any supported OAuth service.
- OAuth Provider Adapters - Abstracts provider-specific OAuth implementations behind a single, unified authentication API.
- OAuth Provider Interfaces - Defines a common interface for all OAuth providers, allowing uniform authentication and user data retrieval across different services.
- OAuth - Defines a common interface for all OAuth providers, enabling uniform authentication and user data retrieval across different services.
- OAuth Provider Registries - A central store where providers are registered by name, enabling dynamic lookup and invocation during authentication flows.
- Authentication Profile Standardization - Return a consistent User struct with common fields like email, name, avatar URL, and tokens across all supported providers.
- OAuth Profile Normalizers - A library that returns normalized user data with common fields plus raw provider details from any supported OAuth service.
- OAuth - Retrieves normalized user profile data from various OAuth providers with common fields.
- Cookie-Based Session Storage - Persisting authentication state between requests using encrypted cookies with configurable security options.
- Refresh Token Grants - Obtain new access tokens using refresh tokens when the original token expires.
- Authentication and Authorization - Simple OAuth and OAuth2 provider integration.
- Security & Privacy - Idiomatic OAuth and OAuth2 authentication for multiple providers.
