DPoP for Web Platform API JavaScript runtimes

An OAuth 2.x / OIDC 1.0 client library for Python built on top of `requests`.

OIDC SSH login for Linux with DPoP — replace static SSH keys with IdP-issued tokens, no gateway

DPoP for golang clients and servers

Open Source Single Binary Authentication for the Agentic Era.

A high-performance, zero-trust distributed framework in Rust. Orchestrates ephemeral WASI P2 components and native containers with unified identity (DPoP), JIT secrets (Vault), and multi-model persistence (SurrealDB). Built for high-density, memory-safe computing in FinTech and DefTech.

A library that helps you create and verify OAuth2 DPoP proof tokens.

Digital authentication and identity validation, ASP.NET Core, Identity, Duende, Passkeys, Aspire, swiyu

ASP.NET Core OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

Experimental alternative flow for OAuth First-Party Applications

TypeScript SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

Demo Solid application using the Spring Framework.

Python SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

Go SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, net/http).

Signet: An offline-first identity and authentication protocol designed to replace insecure bearer tokens with phishing-resistant, proof-of-possession credentials

A Quarkus application demonstrating DPoP (RFC 9449) token binding with Keycloak, including jti replay protection and k6 test scenarios

agentic oAuth

Learn the modern identity stack by building it — 9 interactive CLI simulations covering WebAuthn, OIDC, OAuth2, DPoP, SCIM, and CAEP in pure Node.js

Implementação de referência Java production-grade do Iniciador de Pagamento (PISP) — Open Finance Brasil Fase 4 · DPoP RFC 9449 · state machines · simulador in-process do detentor de conta. Parte da Suíte de Referência Regulatória BR.

Production-grade Go auth service. NIST AAL2: OAuth2/OIDC, MFA, WebAuthn, DPoP, multi-tenancy, SAML, GDPR. A QuantFlow Studio project — shipped by Pilot.