Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

oauth2

package

Go to main page

Versions in this module

v1

v1.2.21

Feb 18, 2026

v1.2.20

Feb 12, 2026

v1.2.19

Feb 10, 2026

v1.2.18

Feb 2, 2026

v1.2.17

Feb 2, 2026

Changes in this version

+ func GeneratePKCEChallenge() (verifier, challenge string, err error)

+ func SetLogger(l schemas.Logger)

+ func ValidatePKCEChallenge(verifier, challenge string) bool

+ type DynamicClientRegistrationRequest struct

+ ClientName string

+ ClientURI string

+ Contacts []string

+ GrantTypes []string

+ LogoURI string

+ RedirectURIs []string

+ ResponseTypes []string

+ Scope string

+ TokenEndpointAuthMethod string

+ type DynamicClientRegistrationResponse struct

+ ClientID string

+ ClientIDIssuedAt int64

+ ClientSecret string

+ ClientSecretExpiresAt int64

+ RegistrationAccessToken string

+ RegistrationClientURI string

+ func RegisterDynamicClient(ctx context.Context, registrationURL string, ...) (*DynamicClientRegistrationResponse, error)

+ type OAuth2Provider struct

+ func NewOAuth2Provider(configStore configstore.ConfigStore, logger schemas.Logger) *OAuth2Provider

+ func (p *OAuth2Provider) CompleteOAuthFlow(ctx context.Context, state, code string) error

+ func (p *OAuth2Provider) GetAccessToken(ctx context.Context, oauthConfigID string) (string, error)

+ func (p *OAuth2Provider) GetPendingMCPClient(oauthConfigID string) (*schemas.MCPClientConfig, error)

+ func (p *OAuth2Provider) GetPendingMCPClientByState(state string) (*schemas.MCPClientConfig, string, error)

+ func (p *OAuth2Provider) InitiateOAuthFlow(ctx context.Context, config *schemas.OAuth2Config) (*schemas.OAuth2FlowInitiation, error)

+ func (p *OAuth2Provider) RefreshAccessToken(ctx context.Context, oauthConfigID string) error

+ func (p *OAuth2Provider) RemovePendingMCPClient(oauthConfigID string) error

+ func (p *OAuth2Provider) RevokeToken(ctx context.Context, oauthConfigID string) error

+ func (p *OAuth2Provider) StorePendingMCPClient(oauthConfigID string, mcpClientConfig schemas.MCPClientConfig) error

+ func (p *OAuth2Provider) ValidateToken(ctx context.Context, oauthConfigID string) (bool, error)

+ type OAuthMetadata struct

+ AuthorizationURL string

+ GrantTypes []string

+ Issuer string

+ PKCEMethods []string

+ RegistrationURL *string

+ ResponseTypes []string

+ ScopesSupported []string

+ TokenAuthMethods []string

+ TokenURL string

+ func DiscoverOAuthMetadata(ctx context.Context, serverURL string) (*OAuthMetadata, error)

+ type ResourceMetadata struct

+ AuthorizationServers []string

+ Scopes []string

+ ScopesSupported []string

+ type TokenRefreshWorker struct

+ func NewTokenRefreshWorker(provider *OAuth2Provider, logger schemas.Logger) *TokenRefreshWorker

+ func (w *TokenRefreshWorker) SetLookAheadWindow(window time.Duration)

+ func (w *TokenRefreshWorker) SetRefreshInterval(interval time.Duration)

+ func (w *TokenRefreshWorker) Start(ctx context.Context)

+ func (w *TokenRefreshWorker) Stop()