OAuth 2.0 server and client; OpenID Connect Provider (OP) & UMA Authorization Server (AS)

GluuFederation/oxAuth https://gluu.org/docs/ce
starsStars 293
forksForks 116
watchersWatchers 293
current-versionCurrent version 3.0.2
total-releasesTotal releases 17
open_issues_countOpen issues 91
dateFirst release 2014-03-28
dateLatest release 2017-06-22
updateLast update 2020-12-22


oxAuth is an open source OpenID Connect Provider (OP) and UMA Authorization Server (AS). The project also includes OpenID Connect Client code which can be used by websites to validate tokens.

oxAuth currently implements all required aspects of the OpenID Connect stack, including an OAuth 2.0 authorization server, Simple Web Discovery, Dynamic Client Registration, JSON Web Tokens, JSON Web Keys, and User Info Endpoint.

oxAuth is tightly coupled with oxTrust.

oxAuth configuration is stored in LDAP, and oxTrust is needed to generate the proper configuration. For deployment instructions, use the Gluu Server documentation