Repositories list

• mcp-authorization-secured-api

  Public
  Shows how organizations can expose secure API data to AI agents using Model Content Protocol Authorization

  TypeScript

  •

  Apache License 2.0

  •0•3•3•2•Updated Oct 31, 2025Oct 31, 2025

• nonce-authenticator

  Public

  curityio/nonce-authenticator’s past year of commit activity
  Example authenticator which uses a nonce to authenticate within a web view

  pluginmobileauthenticator+ 2ssononce

  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 31, 2025Oct 31, 2025

• idsvr-docker

  Public

  curityio/idsvr-docker’s past year of commit activity
  Docker-related files, resources, and information for the Curity Identity Server

  dockerdeploymentcurity

  Dockerfile

  •

  Apache License 2.0

  •3•9•0•0•Updated Oct 29, 2025Oct 29, 2025

• github-authenticator

  Public

  curityio/github-authenticator’s past year of commit activity
  Github oauth authenticator that can be used with any Java-based Web API

  githubpluginoauth2+ 2loginauthenticator

  Java

  •

  Apache License 2.0

  •2•4•0•3•Updated Oct 28, 2025Oct 28, 2025

• tyk-phantom-token-plugin

  Public
  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 25, 2025Oct 25, 2025

• authentication-fallback-demo

  Public

  curityio/authentication-fallback-demo’s past year of commit activity
  Demo environment using a service-checker action to determine if authentication should fallback to an alternative mode of Authentication

  Apache License 2.0

  •0•0•0•0•Updated Oct 25, 2025Oct 25, 2025

• authzen-token-procedure

  Public

  curityio/authzen-token-procedure’s past year of commit activity
  A token procedure plugin enabling callout to an AuthZEN compliant authorizations service (PDP)

  pluginauthorizationtoken-procedure+ 1authzen

  Java

  •

  Apache License 2.0

  •0•1•0•0•Updated Oct 24, 2025Oct 24, 2025

• ios-idsvr-haapi-ui-kit-dist

  Public
  Objective-C

  •0•0•0•1•Updated Oct 20, 2025Oct 20, 2025

• ios-idsvr-haapi-sdk-dist

  Public
  Distribution of the iOS Hypermedia Authentication API (HAAPI) SDK for the Curity Identity Server

  iossdkhaapi

  Objective-C

  •0•8•0•1•Updated Oct 20, 2025Oct 20, 2025

• ios-idsvr-haapi-driver-dist

  Public

  curityio/ios-idsvr-haapi-driver-dist’s past year of commit activity
  Distribution of the iOS Hypermedia Authentication API (HAAPI) DRIVER for the Curity Identity Server

  iossdkhaapi

  Objective-C

  •0•2•0•1•Updated Oct 19, 2025Oct 19, 2025

• idsvr-helm

  Public
  This repository contains the Curity Identity Server helm chart source code.

  kubernetesdeploymentopenshift+ 3helmcurityoidc-server

  Mustache

  •

  Apache License 2.0

  •23•10•4•1•Updated Oct 15, 2025Oct 15, 2025

• maven-archetypes

  Public
  Archetypes for plugins to enable many extensibility use cases

  pluginmavenauthenticator+ 2archetypecurity

  Java

  •

  Apache License 2.0

  •2•4•0•0•Updated Oct 6, 2025Oct 6, 2025

• curity-operational-training

  Public
  Learn how to operate, administer and develop extensions to the Curity Identity Server

  Shell

  •

  Apache License 2.0

  •0•1•0•0•Updated Oct 3, 2025Oct 3, 2025

• saml-web-client

  Public
  Use the Curity Identity Server to integrate existing SAML-secured web applications

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 2, 2025Oct 2, 2025

• username-password-authenticator

  Public
  An authenticator to customize username and password flows

  pluginauthenticatorcurity+ 1username-password

  Java

  •

  Apache License 2.0

  •1•6•0•1•Updated Sep 25, 2025Sep 25, 2025

• JOSESwift

  Public
  A framework for the JOSE standards JWS, JWE, and JWK written in Swift.

  Swift

  •

  Apache License 2.0

  •118•1•0•0•Updated Sep 22, 2025Sep 22, 2025

• external-idp-token-exchange

  Public
  A custom Token Exchange Procedure to exchange an external IdP issued token (JWT) for downscoping

  plugintoken-exchangetoken-procedure

  Apache License 2.0

  •0•0•0•0•Updated Sep 15, 2025Sep 15, 2025

• freja-eid-authenticator

  Public
  Verisec oauth authenticator that can be used with any Java-based Web API

  pluginauthenticatorfreja

  Kotlin

  •

  Apache License 2.0

  •3•2•0•2•Updated Sep 12, 2025Sep 12, 2025

• angular-assisted-token-website

  Public
  Example Angular SPA that implements OpenID Connect using the assisted token flow

  oauth2angularspa+ 3openid-connectassisted-tokencode-example

  TypeScript

  •

  Apache License 2.0

  •3•6•0•6•Updated Sep 9, 2025Sep 9, 2025

• cloud-native-oauth-security-examples

  Public
  End-to-end code examples for the O'Reilly book on Cloud Native Data Security with OAuth

  TypeScript

  •

  Apache License 2.0

  •8•21•0•0•Updated Sep 4, 2025Sep 4, 2025

• lookup-account-auth-action

  Public
  An authentication action plugin which allows to fetch account attributes based on an account manager.

  pluginauthentication-actionaccount-lookup

  Groovy

  •

  Apache License 2.0

  •0•1•0•0•Updated Aug 25, 2025Aug 25, 2025

• identity-picker

  Public
  An authentication action that lists roles for a user to to choose from.

  pluginauthentication-actionidentity-picker

  Kotlin

  •

  Apache License 2.0

  •2•2•0•0•Updated Aug 20, 2025Aug 20, 2025

• aws-phantom-token-lambda-authorizer

  Public
  A lambda authorizer for the AWS API Gateway implementing the phantom token pattern

  awsaws-lambdalambda-function+ 1phantom-token

  JavaScript

  •

  Apache License 2.0

  •2•2•0•0•Updated Aug 7, 2025Aug 7, 2025

• phantom-token-lambda-authorizer

  Public
  A generic lambda authorizer implementing the phantom token pattern

  JavaScript

  •

  Apache License 2.0

  •2•0•0•0•Updated Aug 5, 2025Aug 5, 2025

• token-handler-js-assistant

  Public
  A helper library to help SPAs interact with OAuth Agent in the Token Handler pattern.

  oauth2spaopenid-connect+ 2token-handleroauth-agent

  TypeScript

  •

  Apache License 2.0

  •2•1•0•0•Updated Aug 1, 2025Aug 1, 2025

• oauth-assistant-example

  Public
  A vanilla JavaScript SPA that uses the OAuth Assistant

  oauth2spaopenid-connect+ 2code-exampleoauth-assistant

  JavaScript

  •

  Apache License 2.0

  •0•0•1•0•Updated Jul 17, 2025Jul 17, 2025

• polling-example-authenticator

  Public
  A minimal authentication plugin implementing the polling mechanism

  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• mock-backend-api

  Public
  Mock backend API to simulate a user-driven approval flow used by a custom polling authenticator

  JavaScript

  •0•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• spa-using-curitytokenhandler

  Public
  Demonstrates Hardened Security for Single Page Applications

  reactoauth2spa+ 3openid-connectcode-exampletoken-handler

  TypeScript

  •

  Apache License 2.0

  •1•4•0•0•Updated Jun 24, 2025Jun 24, 2025

• spa-using-token-handler

  Public
  API driven OpenID Connect SPA security, using only the most secure cookies in the browser

  reactoauth2spa+ 3openid-connectcode-exampletoken-handler

  TypeScript

  •

  Apache License 2.0

  •20•69•0•0•Updated Jun 24, 2025Jun 24, 2025