Repositories list

• mcp-authorization-secured-api

  Public
  Shows how organizations can expose secure API data to AI agents using Model Content Protocol Authorization

  TypeScript

  •

  Apache License 2.0

  •0•1•3•1•Updated Oct 9, 2025Oct 9, 2025

• maven-archetypes

  Public
  Archetypes for plugins to enable many extensibility use cases

  pluginmavenauthenticator+ 2archetypecurity

  Java

  •

  Apache License 2.0

  •2•4•0•0•Updated Oct 6, 2025Oct 6, 2025

• tyk-phantom-token-plugin

  Public
  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 5, 2025Oct 5, 2025

• curity-operational-training

  Public
  Learn how to operate, administer and develop extensions to the Curity Identity Server

  Shell

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 3, 2025Oct 3, 2025

• saml-web-client

  Public
  Use the Curity Identity Server to integrate existing SAML-secured web applications

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Oct 2, 2025Oct 2, 2025

• authzen-token-procedure

  Public
  A token procedure plugin enabling callout to an AuthZEN compliant authorizations service (PDP)

  pluginauthorizationtoken-procedure+ 1authzen

  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Sep 30, 2025Sep 30, 2025

• username-password-authenticator

  Public
  An authenticator to customize username and password flows

  pluginauthenticatorcurity+ 1username-password

  Java

  •

  Apache License 2.0

  •1•6•0•1•Updated Sep 25, 2025Sep 25, 2025

• JOSESwift

  Public
  A framework for the JOSE standards JWS, JWE, and JWK written in Swift.

  Swift

  •

  Apache License 2.0

  •118•1•0•0•Updated Sep 22, 2025Sep 22, 2025

• idsvr-helm

  Public
  This repository contains the Curity Identity Server helm chart source code.

  deploymentopenshiftcurity+ 3oidc-serverkuberneteshelm

  Mustache

  •

  Apache License 2.0

  •22•10•4•1•Updated Sep 22, 2025Sep 22, 2025

• idsvr-docker

  Public
  Docker-related files, resources, and information for the Curity Identity Server

  deploymentcuritydocker

  Dockerfile

  •

  Apache License 2.0

  •3•9•0•0•Updated Sep 22, 2025Sep 22, 2025

• external-idp-token-exchange

  Public
  A custom Token Exchange Procedure to exchange an external IdP issued token (JWT) for downscoping

  plugintoken-exchangetoken-procedure

  Apache License 2.0

  •0•0•0•0•Updated Sep 15, 2025Sep 15, 2025

• freja-eid-authenticator

  Public
  Verisec oauth authenticator that can be used with any Java-based Web API

  pluginauthenticatorfreja

  Kotlin

  •

  Apache License 2.0

  •3•2•0•2•Updated Sep 12, 2025Sep 12, 2025

• angular-assisted-token-website

  Public
  Example Angular SPA that implements OpenID Connect using the assisted token flow

  spaopenid-connectassisted-token+ 3code-exampleoauth2angular

  TypeScript

  •

  Apache License 2.0

  •3•6•0•6•Updated Sep 9, 2025Sep 9, 2025

• cloud-native-oauth-security-examples

  Public
  End-to-end code examples for the O'Reilly book on Cloud Native Data Security with OAuth

  TypeScript

  •

  Apache License 2.0

  •7•21•1•0•Updated Sep 4, 2025Sep 4, 2025

• lookup-account-auth-action

  Public
  An authentication action plugin which allows to fetch account attributes based on an account manager.

  pluginauthentication-actionaccount-lookup

  Groovy

  •

  Apache License 2.0

  •0•1•0•0•Updated Aug 25, 2025Aug 25, 2025

• identity-picker

  Public
  An authentication action that lists roles for a user to to choose from.

  pluginauthentication-actionidentity-picker

  Kotlin

  •

  Apache License 2.0

  •2•2•0•0•Updated Aug 20, 2025Aug 20, 2025

• aws-phantom-token-lambda-authorizer

  Public
  A lambda authorizer for the AWS API Gateway implementing the phantom token pattern

  awsaws-lambdalambda-function+ 1phantom-token

  JavaScript

  •

  Apache License 2.0

  •2•2•0•0•Updated Aug 7, 2025Aug 7, 2025

• github-authenticator

  Public
  Github oauth authenticator that can be used with any Java-based Web API

  githubpluginoauth2+ 2loginauthenticator

  Java

  •

  Apache License 2.0

  •2•4•0•2•Updated Aug 6, 2025Aug 6, 2025

• phantom-token-lambda-authorizer

  Public
  A generic lambda authorizer implementing the phantom token pattern

  JavaScript

  •

  Apache License 2.0

  •2•0•0•0•Updated Aug 5, 2025Aug 5, 2025

• token-handler-js-assistant

  Public
  A helper library to help SPAs interact with OAuth Agent in the Token Handler pattern.

  oauth2spaopenid-connect+ 2token-handleroauth-agent

  TypeScript

  •

  Apache License 2.0

  •2•1•0•0•Updated Aug 1, 2025Aug 1, 2025

• oauth-assistant-example

  Public
  A vanilla JavaScript SPA that uses the OAuth Assistant

  spaopenid-connectcode-example+ 2oauth-assistantoauth2

  JavaScript

  •

  Apache License 2.0

  •0•0•1•0•Updated Jul 17, 2025Jul 17, 2025

• polling-example-authenticator

  Public
  A minimal authentication plugin implementing the polling mechanism

  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• mock-backend-api

  Public
  Mock backend API to simulate a user-driven approval flow used by a custom polling authenticator

  JavaScript

  •0•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• spa-using-curitytokenhandler

  Public
  Demonstrates Hardened Security for Single Page Applications

  reactoauth2spa+ 3openid-connectcode-exampletoken-handler

  TypeScript

  •

  Apache License 2.0

  •1•4•0•0•Updated Jun 24, 2025Jun 24, 2025

• spa-using-token-handler

  Public
  API driven OpenID Connect SPA security, using only the most secure cookies in the browser

  reactoauth2spa+ 3openid-connectcode-exampletoken-handler

  TypeScript

  •

  Apache License 2.0

  •20•69•0•0•Updated Jun 24, 2025Jun 24, 2025

• client-assertions-with-jwks-uri

  Public
  API security requiring clients to use strong authentication, via client assertions (RFC7521, RFC7523)

  apioauth2zero-trust+ 4code-exampleclient-assertionfinancial-gradejwks-uri

  JavaScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Jun 20, 2025Jun 20, 2025

• mobile-deployments

  Public
  Resources for automating the setup of Curity mobile code examples

  dockeroauth2mobile+ 2deploymentopenid-connect

  Shell

  •

  Apache License 2.0

  •1•0•0•0•Updated Jun 20, 2025Jun 20, 2025

• rag-time

  Public
  RAG Time: A 5-week Learning Journey to Mastering RAG

  Jupyter Notebook

  •

  MIT License

  •266•1•0•0•Updated Jun 17, 2025Jun 17, 2025

• ios-haapi-ui-sdk-demo

  Public
  An OpenID Connect iOS demo app showing how to use the HAAPI UI SDK and hardened mobile security

  iosoauth2mobile+ 3openid-connectcode-examplehaapi

  Swift

  •

  Apache License 2.0

  •0•0•0•0•Updated Jun 16, 2025Jun 16, 2025

• android-haapi-ui-sdk-demo

  Public
  An OpenID Connect Android demo app showing how to use the HAAPI UI SDK and hardened mobile security

  androidoauth2mobile+ 3openid-connectcode-examplehaapi

  Kotlin

  •

  Apache License 2.0

  •1•1•0•0•Updated Jun 16, 2025Jun 16, 2025