go-oauth2-server

Unfortunately Hydra does not (and will not) support the resource owner password credentials (ROPC) grant (https://github.com/ory/hydra/pull/297#issuecomment-294282671) I'm no security expert, but to my understanding the ROPC grant makes sense for highly privileged applications, i.e. 1st party client applications (e.g. main app website, main native iOS client) as explained by http://oauthlib.readthedocs.io/en/latest/oauth2/grants/passw... I've been looking around in this space for OAuth and auth out of the box alternatives. I've tried Kong's OAuth2 plugin (https://getkong.org/plugins/oauth2-authentication/) but after trying to integrate it felt like I had to write more code than necessary. Also had to configure a lot of APIs, and felt like it was clunky to manage them that way. I have also tried to play with http://anvil.io, but the author

Test users available as fixture: https://github.com/RichardKnop/go-oauth2-server/blob/master/... go-oauth2-server loaddata \ oauth/fixtures/scopes.yml \ oauth/fixtures/roles.yml \ oauth/fixtures/test_clients.yml To insert some test data to database.

Hi, you can use resource owner password credentials grant which is part of OAuth2 spec: https://github.com/RichardKnop/go-oauth2-server#resource-own... It's basically a login with username and password. If you want a fully fledged identity provider on top of OAuth2 (so create / update user account, password reset), I have a sample project which extends on the oauth2 repository and builds a full identity provider on top of it: https://github.com/RichardKnop/example-api About dependencies: only two are required - etcd/consul and postgres. There is no other requirements. Originally I developed this project while deploying to a CoreOS cluster so etcd was a native choice for storing app configuration in a distributed key store. Consul support was added later in form of a contribution as an alternative to etcd. I also want to remove dependency

Interesting work. Especially for me as I have spend a lot of time delving into OAuth2 spec during my career and I have my own competing solution :) See it here: https://github.com/RichardKnop/go-oauth2-server Available as docker container. You can simply deploy it via docker-compose up. Yours seem to be better maintained though :)

Hello, I would like to show you a SaaS project I have created. It has taken me about 7-8 months of work to arrive to the point I am ready to show it to people and get some feedback so please be respectful. It is an uptime and performance monitoring platform which currently has a web app and an iOS app. Right now it supports email, push notification and Slack alerts as well as team management. I am planning to add more features and support more platforms in the future. I have developed it as a microservices architecture using Go. Services are deployed as Docker containers on CoreOS boxes and I use etcd for remote config management. It's running on AWS and I have spent a lot of time making the deployment process very solid, using Terraform and Ansible. Web services are written in Golang, I use Postgres database to store the data, the web ap