[{"_1":2,"_173":-5,"_174":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_152":153},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":85,"_107":108,"_145":-5,"_146":11,"_147":17,"_148":11,"_149":-5,"_150":151},"canonicalUrl","https://hub.docker.com/r/inklabs/goauth2/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","inklabs","reponame","goauth2","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2020-04-06T04:59:53.874347Z","description","GOAuth2 - An OAuth2 Server in Go","is_private","last_updated","2020-08-12T17:54:04.712865Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",337,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Go OAuth2 Server\n\n[![Build Status](https://travis-ci.org/inklabs/goauth2.svg?branch=master)](https://travis-ci.org/inklabs/goauth2)\n[![Go Report Card](https://goreportcard.com/badge/github.com/inklabs/goauth2)](https://goreportcard.com/report/github.com/inklabs/goauth2)\n[![Test Coverage](https://api.codeclimate.com/v1/badges/7970cb8ab9408b433cde/test_coverage)](https://codeclimate.com/github/inklabs/goauth2/test_coverage)\n[![Maintainability](https://api.codeclimate.com/v1/badges/7970cb8ab9408b433cde/maintainability)](https://codeclimate.com/github/inklabs/goauth2/maintainability)\n[![GoDoc](https://godoc.org/github.com/inklabs/goauth2?status.svg)](https://godoc.org/github.com/inklabs/goauth2)\n[![Go Version](https://img.shields.io/github/go-mod/go-version/inklabs/goauth2.svg)](https://github.com/inklabs/goauth2/blob/master/go.mod)\n[![Release](https://img.shields.io/github/release/inklabs/goauth2.svg?include_prereleases&sort=semver)](https://github.com/inklabs/goauth2/releases/latest)\n[![License](https://img.shields.io/github/license/inklabs/goauth2.svg)](https://github.com/inklabs/goauth2/blob/master/LICENSE)\n\nAn OAuth2 server in Go. This project uses an embedded [RangeDB](https://www.github.com/inklabs/rangedb) event store.\n\n## Docs\n\n- [Docs](https://github.com/inklabs/goauth2/tree/master/docs)\n\n## Docker\n\n```\ndocker run -p 8080:8080 inklabs/goauth2\n```\n\n## Client Credentials Grant\n\n* https://tools.ietf.org/html/rfc6749#section-4.4\n\n```\n+---------+ +---------------+\n| | | |\n| |>--(A)- Client Authentication --->| Authorization |\n| Client | | Server |\n| |<--(B)---- Access Token ---------<| |\n| | | |\n+---------+ +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=client_credentials\" \\\n -d \"scope=read_write\"\n```\n\n```json\n{\n \"access_token\": \"d5f4985587ea46028c0946e4a240a9c1\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\"\n}\n```\n\n## Resource Owner Password Credentials\n\n* https://tools.ietf.org/html/rfc6749#section-4.3\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n v\n | Resource Owner\n (A) Password Credentials\n |\n v\n+---------+ +---------------+\n| |>--(B)---- Resource Owner ------->| |\n| | Password Credentials | Authorization |\n| Client | | Server |\n| |<--(C)---- Access Token ---------<| |\n| | (w/ Optional Refresh Token) | |\n+---------+ +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=password\" \\\n -d \"username=john@example.com\" \\\n -d \"password=Pass123!\" \\\n -d \"scope=read_write\"\n```\n\n```json\n{\n \"access_token\": \"a3c5300be4d24e65a68176c7ba521c50\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"3a801b1fc3d847599b3d5719d82bca7b\"\n}\n```\n\n## Refresh Token\n\n* https://tools.ietf.org/html/rfc6749#section-1.5\n* https://tools.ietf.org/html/rfc6749#section-6\n\n```\n+--------+ +---------------+\n| |--(A)------- Authorization Grant --------->| |\n| | | |\n| |<-(B)----------- Access Token -------------| |\n| | & Refresh Token | |\n| | | |\n| | +----------+ | |\n| |--(C)---- Access Token ---->| | | |\n| | | | | |\n| |<-(D)- Protected Resource --| Resource | | Authorization |\n| Client | | Server | | Server |\n| |--(E)---- Access Token ---->| | | |\n| | | | | |\n| |<-(F)- Invalid Token Error -| | | |\n| | +----------+ | |\n| | | |\n| |--(G)----------- Refresh Token ----------->| |\n| | | |\n| |<-(H)----------- Access Token -------------| |\n+--------+ & Optional Refresh Token +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=refresh_token\" \\\n -d \"refresh_token=3a801b1fc3d847599b3d5719d82bca7b\"\n```\n\n```json\n{\n \"access_token\": \"97ed11d0d399454eb5ab2cab8b29f600\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"b4c69a71124641739f6a83b786b332d3\"\n}\n```\n\n## Authorization Code\n\n* https://tools.ietf.org/html/rfc6749#section-4.1\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n ^\n |\n (B)\n+----|-----+ Client Identifier +---------------+\n| -+----(A)-- & Redirection URI ---->| |\n| User- | | Authorization |\n| Agent -+----(B)-- User authenticates --->| Server |\n| | | |\n| -+----(C)-- Authorization Code ---<| |\n+-|----|---+ +---------------+\n | | ^ v\n (A) (C) | |\n | | | |\n ^ v | |\n+---------+ | |\n| |>---(D)-- Authorization Code ---------' |\n| Client | & Redirection URI |\n| | |\n| |<---(E)----- Access Token -------------------'\n+---------+ (w/ Optional Refresh Token)\n```\n\n```\nopen http://localhost:8080/authorize?client_id=client_id_hash&redirect_uri=https%3A%2F%2Fexample.com%2Foauth2%2Fcallback&response_type=code&state=somestate&scope=read_write\n```\n\n1. Login via the web form (john@example.com | Pass123!)\n1. Click button to grant access\n1. The authorization server redirects back to the redirection URI including an authorization code and any\n state provided by the client\n\n```\nhttps://example.com/oauth2/callback?code=36e2807ee1f94252ac2d9b1d3adf2ba2&state=somestate\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=authorization_code\" \\\n -d \"code=36e2807ee1f94252ac2d9b1d3adf2ba2\" \\\n -d \"redirect_uri=https://example.com/oauth2/callback\"\n```\n\n```json\n{\n \"access_token\": \"865382b944024b2394167d519fa80cba\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"48403032170e46e8af72b7cca1612b43\"\n}\n```\n\n## Implicit\n\n* http://tools.ietf.org/html/rfc6749#section-4.2\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n ^\n |\n (B)\n+----|-----+ Client Identifier +---------------+\n| -+----(A)-- & Redirection URI --->| |\n| User- | | Authorization |\n| Agent -|----(B)-- User authenticates -->| Server |\n| | | |\n| |<---(C)--- Redirection URI ----<| |\n| | with Access Token +---------------+\n| | in Fragment\n| | +---------------+\n| |----(D)--- Redirection URI ---->| Web-Hosted |\n| | without Fragment | Client |\n| | | Resource |\n| (F) |<---(E)------- Script ---------<| |\n| | +---------------+\n+-|--------+\n | |\n (A) (G) Access Token\n | |\n ^ v\n+---------+\n| |\n| Client |\n| |\n+---------+\n```\n\n```\nopen http://localhost:8080/authorize?client_id=client_id_hash&redirect_uri=https%3A%2F%2Fexample.com%2Foauth2%2Fcallback&response_type=token&state=somestate&scope=read_write\n```\n\n1. Login via the web form (john@example.com | Pass123!)\n1. Click button to grant access\n1. The authorization server redirects back to the redirection URI including an access token and any\n state provided by the client in the URI fragment\n\n```\nhttps://example.com/oauth2/callback#access_token=1e21103279e549779a9b5c07d50e641d&expires_at=1574371565&scope=read_write&state=somestate&token_type=Bearer\n```\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",241411589,"orgData",{"_86":87,"_88":89,"_90":91,"_92":29,"_93":94,"_95":94,"_96":97,"_98":99,"_100":101,"_102":103,"_104":94,"_105":94,"_106":17},"id","e40445d178bc4f6384b62df63663b080","uuid","e40445d1-78bc-4f63-84b6-2df63663b080","type","organization","orgname","full_name","","location","company","Ink Labs, LLC","profile_url","http://www.zenimg.com","date_joined","2017-02-16T11:16:09.904907Z","gravatar_url","https://www.gravatar.com/avatar/81b47b2ef764a05c04d765903df287c1?s=80&r=g&d=mm","gravatar_email","badge","is_active","recentTags",[109],{"_110":40,"_111":112,"_113":114,"_86":115,"_116":117,"_46":134,"_135":112,"_136":29,"_137":52,"_53":138,"_139":140,"_141":125,"_142":134,"_143":62,"_144":17},"content_type","creator",1477009,"full_size",6130307,94143114,"images",[118],{"_119":120,"_121":122,"_123":94,"_124":125,"_126":127,"_128":129,"_130":94,"_131":-5,"_132":114,"_59":62,"_133":-5},"architecture","amd64","digest","sha256:364ae355c1972461617d34dc7f467c3f9c778023c5d451bdb3a6a1dbac602847","features","last_pulled","2026-08-29T10:31:27.881197841Z","last_pushed","2020-08-12T17:54:05Z","os","linux","os_features","os_version","size","variant","2020-08-12T17:54:04.299283Z","last_updater","last_updater_username","media_type","latest","repository",8778995,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":154,"_161":162,"_150":171,"_172":11},{"_36":155,"_38":156,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":157,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":158,"_75":11,"_76":160,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":159},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_163":60,"_164":-5,"_165":-5,"_166":167},"count","next","previous","results",[168],{"_110":40,"_111":112,"_113":114,"_86":115,"_116":169,"_46":134,"_135":112,"_136":29,"_137":52,"_53":138,"_139":140,"_141":125,"_142":134,"_143":62,"_144":17},[170],{"_119":120,"_121":122,"_123":94,"_124":125,"_126":127,"_128":129,"_130":94,"_131":-5,"_132":114,"_59":62,"_133":-5},[],"canDeleteTags","actionData","errors"]

inklabs/goauth2

Tags for inklabs/goauth2