rfc6750

A full featured, secure, standards compliant TypeScript implementation of an OAuth/OIDC authorization server for Nodejs that utilizes JWT and Proof Key for Code Exchange (PKCE)

RFC 6750(The OAuth 2.0 Authorization Framework: Bearer Token Usage)

An MCP server over Canada's public tender and award data (CanadaBuys). Scoped auth, provenance on every result, and a write that takes two calls.

RFC 6750 Bearer Token Usage for Go: typed extraction of bearer tokens from HTTP requests and the WWW-Authenticate: Bearer challenge. Stdlib-only.

OAuth 2.0 bearer-token resource server for Rust HTTP services: JWT access-token validation against a JWKS, RFC 9728 protected-resource metadata, RFC 6750 WWW-Authenticate challenges, an optional static API key, and axum integration. Provider-agnostic (Authentik, Authelia, Kanidm) — every difference is config, never a code branch.

Framework-agnostic JWT verifier for OIDC issuers with JWKS caching, strict claim validation, and scope/permission checks.