[{"_1":2,"_181":-5,"_182":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_160":161},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":21,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":89,"_111":112,"_149":-5,"_150":11,"_151":21,"_152":11,"_153":-5,"_154":11,"_155":-5,"_156":157,"_158":113,"_159":-7},"canonicalUrl","https://hub.docker.com/r/inklabs/goauth2/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","inklabs","reponame","goauth2","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2020-04-06T04:59:53.874347Z","description","GOAuth2 - An OAuth2 Server in Go","is_private","last_updated","2020-08-12T17:54:04.712865Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",347,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Go OAuth2 Server\n\n[![Build Status](https://travis-ci.org/inklabs/goauth2.svg?branch=master)](https://travis-ci.org/inklabs/goauth2)\n[![Go Report Card](https://goreportcard.com/badge/github.com/inklabs/goauth2)](https://goreportcard.com/report/github.com/inklabs/goauth2)\n[![Test Coverage](https://api.codeclimate.com/v1/badges/7970cb8ab9408b433cde/test_coverage)](https://codeclimate.com/github/inklabs/goauth2/test_coverage)\n[![Maintainability](https://api.codeclimate.com/v1/badges/7970cb8ab9408b433cde/maintainability)](https://codeclimate.com/github/inklabs/goauth2/maintainability)\n[![GoDoc](https://godoc.org/github.com/inklabs/goauth2?status.svg)](https://godoc.org/github.com/inklabs/goauth2)\n[![Go Version](https://img.shields.io/github/go-mod/go-version/inklabs/goauth2.svg)](https://github.com/inklabs/goauth2/blob/master/go.mod)\n[![Release](https://img.shields.io/github/release/inklabs/goauth2.svg?include_prereleases&sort=semver)](https://github.com/inklabs/goauth2/releases/latest)\n[![License](https://img.shields.io/github/license/inklabs/goauth2.svg)](https://github.com/inklabs/goauth2/blob/master/LICENSE)\n\nAn OAuth2 server in Go. This project uses an embedded [RangeDB](https://www.github.com/inklabs/rangedb) event store.\n\n## Docs\n\n- [Docs](https://github.com/inklabs/goauth2/tree/master/docs)\n\n## Docker\n\n```\ndocker run -p 8080:8080 inklabs/goauth2\n```\n\n## Client Credentials Grant\n\n* https://tools.ietf.org/html/rfc6749#section-4.4\n\n```\n+---------+ +---------------+\n| | | |\n| |>--(A)- Client Authentication --->| Authorization |\n| Client | | Server |\n| |<--(B)---- Access Token ---------<| |\n| | | |\n+---------+ +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=client_credentials\" \\\n -d \"scope=read_write\"\n```\n\n```json\n{\n \"access_token\": \"d5f4985587ea46028c0946e4a240a9c1\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\"\n}\n```\n\n## Resource Owner Password Credentials\n\n* https://tools.ietf.org/html/rfc6749#section-4.3\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n v\n | Resource Owner\n (A) Password Credentials\n |\n v\n+---------+ +---------------+\n| |>--(B)---- Resource Owner ------->| |\n| | Password Credentials | Authorization |\n| Client | | Server |\n| |<--(C)---- Access Token ---------<| |\n| | (w/ Optional Refresh Token) | |\n+---------+ +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=password\" \\\n -d \"username=john@example.com\" \\\n -d \"password=Pass123!\" \\\n -d \"scope=read_write\"\n```\n\n```json\n{\n \"access_token\": \"a3c5300be4d24e65a68176c7ba521c50\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"3a801b1fc3d847599b3d5719d82bca7b\"\n}\n```\n\n## Refresh Token\n\n* https://tools.ietf.org/html/rfc6749#section-1.5\n* https://tools.ietf.org/html/rfc6749#section-6\n\n```\n+--------+ +---------------+\n| |--(A)------- Authorization Grant --------->| |\n| | | |\n| |<-(B)----------- Access Token -------------| |\n| | & Refresh Token | |\n| | | |\n| | +----------+ | |\n| |--(C)---- Access Token ---->| | | |\n| | | | | |\n| |<-(D)- Protected Resource --| Resource | | Authorization |\n| Client | | Server | | Server |\n| |--(E)---- Access Token ---->| | | |\n| | | | | |\n| |<-(F)- Invalid Token Error -| | | |\n| | +----------+ | |\n| | | |\n| |--(G)----------- Refresh Token ----------->| |\n| | | |\n| |<-(H)----------- Access Token -------------| |\n+--------+ & Optional Refresh Token +---------------+\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=refresh_token\" \\\n -d \"refresh_token=3a801b1fc3d847599b3d5719d82bca7b\"\n```\n\n```json\n{\n \"access_token\": \"97ed11d0d399454eb5ab2cab8b29f600\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"b4c69a71124641739f6a83b786b332d3\"\n}\n```\n\n## Authorization Code\n\n* https://tools.ietf.org/html/rfc6749#section-4.1\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n ^\n |\n (B)\n+----|-----+ Client Identifier +---------------+\n| -+----(A)-- & Redirection URI ---->| |\n| User- | | Authorization |\n| Agent -+----(B)-- User authenticates --->| Server |\n| | | |\n| -+----(C)-- Authorization Code ---<| |\n+-|----|---+ +---------------+\n | | ^ v\n (A) (C) | |\n | | | |\n ^ v | |\n+---------+ | |\n| |>---(D)-- Authorization Code ---------' |\n| Client | & Redirection URI |\n| | |\n| |<---(E)----- Access Token -------------------'\n+---------+ (w/ Optional Refresh Token)\n```\n\n```\nopen http://localhost:8080/authorize?client_id=client_id_hash&redirect_uri=https%3A%2F%2Fexample.com%2Foauth2%2Fcallback&response_type=code&state=somestate&scope=read_write\n```\n\n1. Login via the web form (john@example.com | Pass123!)\n1. Click button to grant access\n1. The authorization server redirects back to the redirection URI including an authorization code and any\n state provided by the client\n\n```\nhttps://example.com/oauth2/callback?code=36e2807ee1f94252ac2d9b1d3adf2ba2&state=somestate\n```\n\n```shell script\ncurl localhost:8080/token \\\n -u client_id_hash:client_secret_hash \\\n -d \"grant_type=authorization_code\" \\\n -d \"code=36e2807ee1f94252ac2d9b1d3adf2ba2\" \\\n -d \"redirect_uri=https://example.com/oauth2/callback\"\n```\n\n```json\n{\n \"access_token\": \"865382b944024b2394167d519fa80cba\",\n \"expires_at\": 1574371565,\n \"token_type\": \"Bearer\",\n \"scope\": \"read_write\",\n \"refresh_token\": \"48403032170e46e8af72b7cca1612b43\"\n}\n```\n\n## Implicit\n\n* http://tools.ietf.org/html/rfc6749#section-4.2\n\n```\n+----------+\n| Resource |\n| Owner |\n| |\n+----------+\n ^\n |\n (B)\n+----|-----+ Client Identifier +---------------+\n| -+----(A)-- & Redirection URI --->| |\n| User- | | Authorization |\n| Agent -|----(B)-- User authenticates -->| Server |\n| | | |\n| |<---(C)--- Redirection URI ----<| |\n| | with Access Token +---------------+\n| | in Fragment\n| | +---------------+\n| |----(D)--- Redirection URI ---->| Web-Hosted |\n| | without Fragment | Client |\n| | | Resource |\n| (F) |<---(E)------- Script ---------<| |\n| | +---------------+\n+-|--------+\n | |\n (A) (G) Access Token\n | |\n ^ v\n+---------+\n| |\n| Client |\n| |\n+---------+\n```\n\n```\nopen http://localhost:8080/authorize?client_id=client_id_hash&redirect_uri=https%3A%2F%2Fexample.com%2Foauth2%2Fcallback&response_type=token&state=somestate&scope=read_write\n```\n\n1. Login via the web form (john@example.com | Pass123!)\n1. Click button to grant access\n1. The authorization server redirects back to the redirection URI including an access token and any\n state provided by the client in the URI fragment\n\n```\nhttps://example.com/oauth2/callback#access_token=1e21103279e549779a9b5c07d50e641d&expires_at=1574371565&scope=read_write&state=somestate&token_type=Bearer\n```\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",241411589,"orgData",{"_90":91,"_92":93,"_94":95,"_96":33,"_97":98,"_99":98,"_100":101,"_102":103,"_104":105,"_106":107,"_108":98,"_109":98,"_110":21},"id","e40445d178bc4f6384b62df63663b080","uuid","e40445d1-78bc-4f63-84b6-2df63663b080","type","organization","orgname","full_name","","location","company","Ink Labs, LLC","profile_url","http://www.zenimg.com","date_joined","2017-02-16T11:16:09.904907Z","gravatar_url","https://www.gravatar.com/avatar/81b47b2ef764a05c04d765903df287c1?s=80&r=g&d=mm","gravatar_email","badge","is_active","recentTags",[113],{"_114":44,"_115":116,"_117":118,"_90":119,"_120":121,"_50":138,"_139":116,"_140":33,"_141":56,"_57":142,"_143":144,"_145":129,"_146":138,"_147":66,"_148":21},"content_type","creator",1477009,"full_size",6130307,94143114,"images",[122],{"_123":124,"_125":126,"_127":98,"_128":129,"_130":131,"_132":133,"_134":98,"_135":-5,"_136":118,"_63":66,"_137":-5},"architecture","amd64","digest","sha256:364ae355c1972461617d34dc7f467c3f9c778023c5d451bdb3a6a1dbac602847","features","last_pulled","2026-10-07T02:51:55.092696655Z","last_pushed","2020-08-12T17:54:05Z","os","linux","os_features","os_version","size","variant","2020-08-12T17:54:04.299283Z","last_updater","last_updater_username","media_type","latest","repository",8778995,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":162,"_169":170,"_156":179,"_180":11},{"_40":163,"_42":164,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":165,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":166,"_79":11,"_80":168,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":167},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_171":64,"_172":-5,"_173":-5,"_174":175},"count","next","previous","results",[176],{"_114":44,"_115":116,"_117":118,"_90":119,"_120":177,"_50":138,"_139":116,"_140":33,"_141":56,"_57":142,"_143":144,"_145":129,"_146":138,"_147":66,"_148":21},[178],{"_123":124,"_125":126,"_127":98,"_128":129,"_130":131,"_132":133,"_134":98,"_135":-5,"_136":118,"_63":66,"_137":-5},[],"canDeleteTags","actionData","errors"]

inklabs/goauth2

Tags for inklabs/goauth2