A full featured, secure, standards compliant TypeScript implementation of an OAuth/OIDC authorization server for Nodejs that utilizes JWT and Proof Key for Code Exchange (PKCE)

ZeroID: Autonomous Agent Identity Management System (AAIMS)

OAuth 2.0 Token Exchange delegated implementation with Microsoft Entra ID and OpenIddict (RFC 8693)

An implementation of RFC 8693 for Ory Hydra, providing powerful capabilities for token exchange in OAuth 2.0 and OpenID Connect servers.

Demo system for Keycloak OAuth2 Token Exchange

agentic oAuth

🔐 TokenBridge is a lightweight Go library that securely bridges identity systems. It allows you to verify ID tokens, exchange them for signed access tokens, and serve public keys via JWKS for token validation.

Verifiable, identity-rooted delegation tokens for AI agents — built on existing standards (OIDC, OAuth 2.0 Token Exchange, JWT, NIST SP 800-63).

token-visualizer

Interactive demo of cross-IdP OAuth 2.0 Token Exchange (RFC 8693) with Keycloak, Spring Boot, and Docker Compose.

Agentic token exchange: nested RFC 8693 actor chains (delegation, not impersonation) + an audience-scoped flatten governed by policy. PingFederate + PingAuthorize config-as-code, with the constraints the design didn't survive.

Go library implementing RFC 8693 OAuth 2.0 Token Exchange