The OAuth 2.0 and OpenID Connect framework behind Pocket ID.
This repository is a fork of Ory Fosite. Ory no longer develops the standalone repository and maintains Fosite in ory/hydra instead. This fork ports those upstream changes and adds the features Pocket ID needs. It is maintained for Pocket ID, so its API follows Pocket ID's requirements and can change between releases.
- RFC 6749: The OAuth 2.0 Authorization Framework
- RFC 6819: OAuth 2.0 Threat Model and Security Considerations
- RFC 7009: OAuth 2.0 Token Revocation
- RFC 7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants
- RFC 7636: Proof Key for Code Exchange (PKCE)
- RFC 7662: OAuth 2.0 Token Introspection
- RFC 8252: OAuth 2.0 for Native Apps
- RFC 8628: OAuth 2.0 Device Authorization Grant
- RFC 8707: Resource Indicators for OAuth 2.0
- RFC 9068: JWT Profile for OAuth 2.0 Access Tokens
- RFC 9126: OAuth 2.0 Pushed Authorization Requests
- RFC 9207: OAuth 2.0 Authorization Server Issuer Identification
- OAuth Client ID Metadata Document
- OpenID Connect Core 1.0
go get github.com/pocket-id/fositeSee the releases for the available versions.
go test ./... # run the tests
make format # fix license headers, Go imports and Markdown formatting
make gen # regenerate the mocks in internal/Ory's copyright stays on files inherited from upstream. make format marks
inherited files that the fork changes and adds the Pocket ID copyright to new
files.
Apache 2.0, see LICENSE. Fosite was originally created by Ory.