DPoP for Web Platform API JavaScript runtimes

An OAuth 2.x / OIDC 1.0 client library for Python built on top of `requests`.

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

OIDC SSH login for Linux with DPoP — replace static SSH keys with IdP-issued tokens, no gateway

DPoP for golang clients and servers

Open Source Single Binary Authentication for the Agentic Era.

A high-performance, zero-trust distributed framework in Rust. Orchestrates ephemeral WASI P2 components and native containers with unified identity (DPoP), JIT secrets (Vault), and multi-model persistence (SurrealDB). Built for high-density, memory-safe computing in FinTech and DefTech.

A library that helps you create and verify OAuth2 DPoP proof tokens.

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

Python SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

Digital authentication and identity validation, ASP.NET Core, Identity, Duende, Passkeys, Aspire, swiyu

TypeScript SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

Go SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, net/http).

Experimental alternative flow for OAuth First-Party Applications

Demo Solid application using the Spring Framework.

Production-grade Go auth service. NIST AAL2: OAuth2/OIDC, MFA, WebAuthn, DPoP, multi-tenancy, SAML, GDPR. A QuantFlow Studio project — shipped by Pilot.

Signet: An offline-first identity and authentication protocol designed to replace insecure bearer tokens with phishing-resistant, proof-of-possession credentials

A Quarkus application demonstrating DPoP (RFC 9449) token binding with Keycloak, including jti replay protection and k6 test scenarios

agentic oAuth

Implementação de referência Java production-grade do Iniciador de Pagamento (PISP) — Open Finance Brasil Fase 4 · DPoP RFC 9449 · state machines · simulador in-process do detentor de conta. Parte da Suíte de Referência Regulatória BR.