Hi, I released Orionis v0.2.0 and would appreciate feedback from Go developers on the API shape, security model, and docs:
https://github.com/stremovskyy/orionis Orionis is a compact Go toolkit and Gin authorization server for service-to-service OAuth2 client_credentials. It issues signed JWT access tokens, exposes JWKS, caches client tokens, and includes Gin middleware for resource services. It is intentionally scoped to machine-to-machine auth, not end-user login or a full identity-provider suite. The README includes a three-process local demo: 1. go run ./cmd/orionis-auth -config ./config/orionis.example.json 2. go run ./examples/gin-billing-service 3. go run ./examples/gin-orders-client The demo client should get status=201 from the protected billing service. I am especially interested in feedback on: - Whether the chain-first builders are idiomatic enough for Go services. - Whether the JWKS/token validation behavior is clear from the docs. - Any security or deployment concerns before this gets more usage. Thanks. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/golang-nuts/CAC_J%3DWh9JC-OpwAqAhbstEoGWm2exNaj4tC4UoqVQwfUAd2jjQ%40mail.gmail.com.
