oauth2 icon indicating copy to clipboard operation
oauth2 copied to clipboard

OAuth 2.0 server library for the Go programming language.

Results 111 oauth2 issues
Sort by recently updated
recently updated
newest added

Hello, Is there a way to find the active token by user id? It seems the store always an encoded string of which userid is part of but there's no...

If you try the following shell execution: ```sh for i in {1..5}; do curl -X POST -d "client_id=myClientID&client_secret=password&grant_type=password&username=jdoe&password=changeit&scope=cn" http://localhost:8899/token; done ``` You will get the following output: ``` {"access_token":"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJteUNsaWVudElEIiwiZXhwIjoxNTgwNzk4NzU3LCJzdWIiOiJhY2NvdW50X2lkIn0.RzrGuvP45fFr_fCLjaCjtt9OkQK3B7QGHkn2-BdX2vuE4C_sAtxuVDKNdEaJiQmIC9YhMxJw18tbFzImmG2Ki13XYAJWdE8gcQldcYD8bv31cvTJApOOKqDifQ9BtN1JPgqbh9iAncakg_GeSqguRXuZGHQd46WBu8cB9_h55xgDxnRX0BFByIY57XQC7JxGnFPaeX17_aW2X6u07mxI6fvPukYGpkK7I3oL_pfahmoHSUSW1u3GOtY1jhZWpE6ytkX7dqgqimDMe1NIJlMqHRn_E1WjUpuJTs3Unc08TEweykTlDZQCLJNtES9tb5f9umAfbZrUiqfb0J1NlJUuZA","expires_in":60,"refresh_token":"BLDY7AXVUZELQLSAU3OS1A","scope":"cn","token_type":"Bearer"} {"error":"server_error","error_description":"The...

how to set time expires_in

In oauth2/generates/jwt_access.go:55-66, when using RSA or ECC, the key is parsed from PEM to sign every token. This should be done once and cached. This makes signing slow (as this...

**Problem** - Right now the /authorize handler forces a redirect as the response when valid. If the request comes client-side from another domain, the redirect fails because of web security...

Trying to figure out the easiest way to store the access token and refresh token in an https only cookie. Have any guidance?

## Description There doesn't seem to be support for the original and updated mongo-go-driver. And as mgo is a discontinued project thus deprecated as a whole, there has to be...

What is supposed to happen with `err` as it is assigned but not used? Is it meant to be `uerr`? `server/server.go:65:2` ``` func (s *Server) redirectError(w http.ResponseWriter, req *AuthorizeRequest, err...

I got the response blow when I create the token by wrong username or password: http code: 500 ```json { "error": "server_error", "error_description": "The authorization server encountered an unexpected condition...