golang/oauth2
Oauth2
This is a Go library for obtaining, refreshing, and attaching OAuth 2.0 access tokens to HTTP requests. It provides a generic token source interface with interchangeable implementations for different OAuth 2.0 grant types, and wraps the Go net/http transport layer to automatically attach access tokens as Authorization headers on outgoing requests.
The library supports the authorization code flow, generating consent page URLs and exchanging authorization codes for tokens. It also implements the device authorization grant for authentication on devices without a browser, and the resource owner password credentials grant for trusted client scenarios. For long-lived credentials, it offers a static token source that always returns the same token.
Token lifecycle management covers acquisition, caching, and automatic refresh using stored refresh tokens. The library caches tokens until they expire, then transparently fetches fresh ones without interrupting the caller. It also provides an authenticated HTTP client that wraps any HTTP client with automatic token injection and refresh.
Features
- OAuth 2.0 Authorization Flows - A Go library for obtaining, refreshing, and attaching OAuth 2.0 access tokens to HTTP requests.
- Go Client Libraries - Provides a Go library for obtaining, refreshing, and attaching OAuth 2.0 access tokens to HTTP requests.
- Authenticated Transports - Attaches access tokens to outgoing HTTP requests by wrapping the transport layer for authenticated communication.
- Authenticated Request Clients - Wraps an HTTP client with automatic token injection and refresh for every outgoing request.
- OAuth Token Refreshes - Provides a token source interface with implementations for refresh, caching, and static credentials.
- Automatic Token Refreshes - Transparently obtains new access tokens using stored refresh tokens when current ones expire.
- Authorization Code Exchanges - Generates consent page URLs and exchanges authorization codes for access tokens.
- Automatic Request Token Injection - Adds access tokens as Authorization headers on outgoing HTTP requests made with the Go net/http client.
- Transport-Level Token Injectors - Wraps the Go net/http transport layer to automatically attach OAuth 2.0 access tokens as Authorization headers.
- Authorization Code Exchanges - Exchanges authorization codes for access tokens after redirecting users to consent pages.
- Authorization Code Flow Handlers - Generates consent page URLs and exchanges authorization codes for access tokens.
- Authorization Code Flow Initiators - Initiates the three-legged OAuth 2.0 authorization code flow with consent URL generation and code exchange.
- Token Acquisitions - Exchanges authorization codes and credentials for short-lived access tokens and optional refresh tokens.
- OAuth2 Token Source Suppliers - Provides a generic token source interface with interchangeable implementations for different OAuth 2.0 grant types.
- Device Authorization Flow Clients - Initiates the OAuth 2.0 device authorization flow by polling for user approval and retrieving tokens.
- Device Grant Implementations - Implements the OAuth 2.0 Device Authorization Grant for headless devices with polling for user approval.
- Device Authorization Flow Initiators - Starts the OAuth 2.0 device authorization flow by obtaining a device code and polling for user approval.
- Device Authorization Polling Clients - Implements the OAuth 2.0 device authorization grant with polling for user approval on browserless devices.
- Resource Owner Password Credentials Grant Handlers - Exchanges a username and password directly for an access token using the OAuth 2.0 password grant type.
- Resource Owner Password Grant Handlers - Exchanges a username and password directly for an OAuth 2.0 access token in trusted client scenarios.
- Authentication Token Caching - Caches authentication tokens across sessions, returning cached tokens until they expire then fetching fresh ones automatically.
- Cached Token Reuses - Returns cached tokens until they expire, then transparently fetches fresh ones to minimize redundant authorization requests.
- Static Token Sources - Offers a static token source for long-lived credentials that never expire.
- Authorization URL Generators - Produces authorization URLs with PKCE challenge and access type parameters for OAuth 2.0 flows.
- Consent URL Builders - Builds consent page URLs with requested scopes and optional PKCE protection for OAuth 2.0 flows.
- DevOps & Infrastructure - Standard library for implementing OAuth2 authentication flows.
- Authentication and Authorization - General OAuth 2.0 client implementation.
- Security & Privacy - Generic OAuth 2.0 package with support for major providers.
