DPoP for Web Platform API JavaScript runtimes

An OAuth 2.x / OIDC 1.0 client library for Python built on top of `requests`.

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

OIDC SSH login for Linux with DPoP — replace static SSH keys with IdP-issued tokens, no gateway

DPoP for golang clients and servers

Open Source Single Binary Authentication for the Agentic Era.

A high-performance, zero-trust distributed framework in Rust. Orchestrates ephemeral WASI P2 components and native containers with unified identity (DPoP), JIT secrets (Vault), and multi-model persistence (SurrealDB). Built for high-density, memory-safe computing in FinTech and DefTech.

Python SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

A library that helps you create and verify OAuth2 DPoP proof tokens.

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

OAuth 2 clients and resource servers for Rust

Digital authentication and identity validation, ASP.NET Core, Identity, Duende, Passkeys, Aspire, swiyu

TypeScript SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

Go SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, net/http).

Production-grade Go auth service. NIST AAL2: OAuth2/OIDC, MFA, WebAuthn, DPoP, multi-tenancy, SAML, GDPR. A QuantFlow Studio project — shipped by Pilot.

Experimental alternative flow for OAuth First-Party Applications

Demo Solid application using the Spring Framework.

Transport-agnostic OAuth 2.1 / OpenID Connect server for the redb ecosystem — OpenIddict on redb.Route, redb-backed stores, MFA, WebAuthn, federation, SCIM, DPoP. Green on PostgreSQL, MSSQL and SQLite.

A Quarkus application demonstrating DPoP (RFC 9449) token binding with Keycloak, including jti replay protection and k6 test scenarios

Signet: An offline-first identity and authentication protocol designed to replace insecure bearer tokens with phishing-resistant, proof-of-possession credentials