OIDC Bash

Bash script collection acting as OAuth2/OIDC Relying Party (RP).

Design

Main purpose is education, hence, simplicity values over code reuse in this repo. For example /token endpoint is an overloaded endpoint that does many things. There are multiple scripts in this repo that communicate with token endpoint but for different flows. You'll see some code duplicate all authenticating against token endpoint however each script does a certain flow.

Supported Standards

OAuth 2 Family

• The OAuth 2.0 Authorization Framework
• The OAuth 2.1 Authorization Framework
• OAuth 2.0 Device Authorization Grant
• OAuth 2.0 Pushed Authorization Requests (PAR)
• OAuth 2.0 JWT-Secured Authorization Request (JAR)
• OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)
• OAuth 2.0 Token Exchange

OIDC Family

• OpenID Connect Core 1.0
• CIBA - Core 1.0