OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.

Ory Hydra is a server implementation of the OAuth 2.0 authorization framework and the OpenID Connect Core 1.0. Existing OAuth2 implementations usually ship as libraries or SDKs such as node-oauth2-server or Ory Fosite, or as fully featured identity solutions with user management and user interfaces, such as Keycloak. Implementing and using OAuth2 without understanding the whole specification is challenging and prone to errors, even when SDKs are being used. The primary goal of Ory Hydra is to make OAuth 2.0 and OpenID Connect 1.0 better accessible. Ory Hydra implements the flows described in OAuth2 and OpenID Connect 1.0 without forcing you to use a "Hydra User Management" or some template engine or a predefined front-end. Instead, it relies on HTTP redirection and cryptographic methods to verify user consent allowing you to use Ory Hydra with any authentication endpoint, be it Ory Kratos, authboss, User Frosting or your proprietary Java authentication. 

Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, profile management, identity schemas, social sign in, registration, account recovery, passwordless. Golang, headless, API-only - without templating or theming headaches.

Ory Kratos is an API-first Identity and User Management system that is built according to cloud architecture best practices. It implements core use cases that almost every software application needs to deal with:. We highly recommend reading the Ory Kratos introduction docs to learn more about Ory Krato's background, feature set, and differentiation from other products. Self-service Login and Registration: Allow end-users to create and sign into accounts (we call them identities) using Username / Email and password combinations, Social Sign In ("Sign in with Google, GitHub"), Passwordless flows, and others. Multi-Factor Authentication (MFA/2FA): Support protocols such as TOTP (RFC 6238 and IETF RFC 4226 - better known as Google Authenticator) Account Verification: Verify that an E-Mail address, phone number, or physical address actually belong to that identity. Account Recovery: Recover access using "Forgot Password" flows, Security Codes (in case of MFA device loss), and others. Profile and Account Management: Update passwords, personal details, email addresses, linked social profiles using secure flows. Admin APIs: Import, update, delete identities. 

Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

The easiest way to get started with Ory Software is in Ory Cloud! It is free for developers, forever, no credit card required!. 

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

ORY Oathkeeper is an Identity &amp; Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. The BeyondCorp Model is designed by Google and secures applications in Zero-Trust networks. Ambassador via auth service. Envoy via the External Authorization HTTP Filter AWS API Gateway via Custom Authorizers Nginx via Authentication Based on Subrequest Result 

Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.

When developing applications, it is often necessary to use services that talk to a database system. Unit Testing these services can be cumbersome because mocking database/DBAL is strenuous. Making slight changes to the schema implies rewriting at least some, if not all of the mocks. The same goes for API changes in the DBAL. To avoid this, it is smarter to test these specific services against a real database that is destroyed after testing. Docker is the perfect system for running unit tests as you can spin up containers in a few seconds and kill them when the test completes. The Dockertest library provides easy to use commands for spinning up Docker containers and using them for your tests. 

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

Ladon is the serpent dragon protecting your resources. Ladon is a library written in Go for access control policies, similar to Role Based Access Control or Access Control Lists. In contrast to ACL and RBAC you get fine-grained access control with the ability to answer questions in complex environments such as multi-tenant or distributed applications and large organizations. Ladon is inspired by AWS IAM Policies. Ladon officially ships with an exemplary in-memory storage implementations. Community-supported adapters are available for CockroachDB. Ladon is now considered stable. Hydra, a security-first open source OAuth2 and OpenID Connect server for new and existing infrastructures that uses Ladon for access control. ORY Editor, an extensible, modern WYSI editor for the web written in React. Fosite, an extensible security first OAuth 2.0 and OpenID Connect SDK for Go. Dockertest: Write better integration tests with dockertest! Installation Concepts Usage  Policies  Conditions  CIDR Condition String Equal Condition Boolean Condition String Match Condition Subject Condition String Pairs Equal Condition Resource Contains Condition Adding Custom Conditions   Persistence   Access Control (Warden) Audit Log (Warden) Metrics Limitations  Regular expressions Examples Good to know Useful commands 

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

The security first OAuth2 &amp; OpenID Connect framework for Go. Built simple, powerful and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, hybrid. The OAuth 2.0 Authorization Framework OAuth 2.0 Multiple Response Type Encoding Practices OAuth 2.0 Threat Model and Security Considerations Proof Key for Code Exchange by OAuth Public Clients OAuth 2.0 for Native Apps OpenID Connect Core 1.0 Motivation API Stability Example A word on quality A word on security A word on extensibility Installation Documentation  Scopes  fosite.WildcardScopeStrategy fosite.HierarchicScopeStrategy   Quickstart Code Examples Example Storage Implementation Extensible handlers JWT Introspection Contribute  Refresh mock objects Hall of Fame 

Go microservice tutorial project using Domain Driven Design and Onion Architecture!

This is an educational repository that includes a microservice written in Go. It is used as the principal example of my video series: Building Microservices in Go. This repository is not a template nor a framework, it's a collection of patterns and guidelines I've successfully used to deliver enterprise microservices when using Go, and just like with everything in Software Development some trade-offs were made. means a link to Youtube video. means a link to Blog post. [X] Project Layout [X] Dependency Injection [X] Secure Configuration  [X] Using Hashicorp Vault  [X] Using AWS SSM [ ] Infrastructure as code [X] Metrics, Traces and Logging using OpenTelemetry [ ] Caching  [X] Memcached   [ ] Redis [X] Persistent Storage  [X] Repository Pattern   [X] Database migrations   [ ] MySQL [X] PostgreSQL   jmoiron/sqlx, jackc/pgx and database/sql   go-gorm/gorm and volatiletech/sqlboiler   Masterminds/squirrel and kyleconroy/sqlc [ ] REST APIs  [X] HTTP Handlers   [X] Custom JSON Types   [ ] Versioning  [X] Error Handling  [X] OpenAPI 3 and Swagger-UI   [ ] Authorization [ ] Events and Messaging  [ ] Apache Kafka  [ ] RabbitMQ  [ ] Redis [ ] Testing  [X] Type-safe mocks with maxbrunsfeld/counterfeiter   [X] Equality with google/go-cmp   [X] Integration tests for Datastores with ory/dockertest   [X] REST APIs [ ] Containerization using Docker [ ] Graceful Shutdown [ ] Search Engine using ElasticSearch [ ] Documentation  C4 Model [ ] Cloud Design Patterns  Reliability  [ ] Circuit Breaker [ ] Tools as Dependencies [ ] Whatever else I forgot to include 

dockertest allows you to quickly and easily test database interactions by creating and destroying databases within your tests using docker. It works by controlling the docker daemon running locally with exec.Command. The flow is as follows -&gt;. dockertest is inspired by https://divan.github.io/posts/integration_testing/ and https://github.com/ory-am/dockertest - however, it does not add 300k loc of dependencies (guesstimated) to your project. See https://github.com/fsouza/go-dockerclient/issues/599 for more info on this. find a free port on the local machine launch docker container and bind that port wait until the container needs to be shutdown 

Go Springfield Bank is a simple digital bank API. Its main purpose is to transfer amounts between internal accounts. Written in Golang, this project aims to follow Go best practices and the clean architecture for better maintainability, extensibility and testability. RESTful endpoints using julienschmidt/httprouter JWT-based authentication using golang-jwt/jwt Postgres database connection pool using jackc/pgx Database migration golang-migrate/migrate Environment variables configuration using ilyakaznacheev/cleanenv Structured logging with contextual information zerolog Error handling with proper HTTP status code Idempotent requests Metrics/health endpoints with heptiolabs/healthcheck OpenAPI/Swagger 2.0 documentation generated with swaggo/swag Integration tests with the help of ory/dockertest 

This project illustrates how to build an API in AWS using Go.

This project illustrates how to build an API in AWS using Go.Contract first OpenAPI using code generation Support running in Lambda with Amazon API Gateway with validation of inputs Logging with meta data including lambda request identifiers Provide an API Gateway client using sigv4 with Go. Protobuf based versioned storage using DynamoDB Local testing with docker using github.com/ory/dockertest/v3 and DynamoDB Local CLI using github.com/alecthomas/kong with logging and sub commands Linting using golangci-lint 

dockertestwrapper is a wrapper for orys awesome dockertest library

As the name suggests dockertestwrapper is a wrapper for orys awesome dockertest library. It provides an easy to use api to be used in your integration tests. 

Ladon is the serpent dragon protecting your resources. Ladon is a library written in Go for access control policies, similar to Role Based Access Control or Access Control Lists. In contrast to ACL and RBAC you get fine-grained access control with the ability to answer questions in complex environments such as multi-tenant or distributed applications and large organizations. Ladon is inspired by AWS IAM Policies. Ladon ships with storage adapters for SQL (officially supported: MySQL 5.5+, PostgreSQL 9.2+) and in-memory. Hydra, a security-first open source OAuth2 and OpenID Connect server for new and existing infrastructures that uses Ladon for access control. ORY Editor, an extensible, modern WYSI editor for the web written in React. Fosite, an extensible security first OAuth 2.0 and OpenID Connect SDK for Go. Dockertest: Write better integration tests with dockertest! Installation Concepts Usage  Policies  Conditions  CIDR Condition String Equal Condition Subject Condition String Pairs Equal Condition Adding Custom Conditions   Persistence   Access Control (Warden) Examples Good to know Useful commands 

A simple Go server/microservice example for Docker's Go Language Guide. Includes a multi-stage Dockerfile, which actually is a good example of how to build Go binaries for production releases. Has functional tests for application's business requirements with proper isolation between tests using ory/dockertest. Has a CI pipeline using GitHub Actions to run functional tests in independent containers. Has a CD pipeline using GitHub Actions to publish to Docker Hub. Building Go modules and Docker images with goreleaser 