pkce

Extensible, strongly-typed Rust OAuth2 client library

Async, builder-pattern Rust client for the Lichess API: full endpoint coverage, NDJSON streaming, and OAuth2 PKCE ('Log in with Lichess').

OpenID Certified Rust OAuth 2.1 / OpenID Connect authorization server with FAPI 2.0, DPoP, mTLS, PAR, JAR, and PostgreSQL/Valkey persistence.

Self-hosted OIDC identity server. Email auth, sessions, refresh token rotation, and a built-in dev console in a single Rust binary with SQLite.

Obtain temporary AWS credentials via OpenID Connect (Entra ID, Okta, Auth0, and more). A Rust reimplementation of awslabs/StsOidcDriver.

A tiny, multi-issuer mock OAuth 2.0 / OpenID Connect provider for local development and integration tests — written in Rust, shipping as a few-MB FROM scratch container.

Provider-registry-driven OAuth SDK for CLIs: authorization-code+PKCE, device-code, and API-key sign-in with pluggable credential storage.

Pure safe Rust (#![forbid(unsafe_code)]) AT Protocol OAuth 2.1 client library with RFC 9449 DPoP, RFC 9126 PAR, RFC 7636 PKCE & formal mathematical verification

Truly random in-place shuffle for Spotify playlists.