Issues

• LoadAccessToken -> This checks for refresh token expiry but not refresh token existence

  go-oauth2/oauth2#303 · Filter by author vjdev47 opened on Sep 2, 2026

• Potential open redirect bypass

  go-oauth2/oauth2#298 · Filter by author Fushuling opened on May 29, 2026

• No need to verify client_secret when use PKCE flow

  go-oauth2/oauth2#296 · Filter by author wsw0108 opened on Dec 26, 2025

• Open Security Advisory

  go-oauth2/oauth2#294 · Filter by author cL0und opened on Dec 8, 2025

• This library does not support scope

  go-oauth2/oauth2#286 · Filter by author kaharman opened on Jul 9, 2025

• The redirect jump url is abnormal, if it contains #

  go-oauth2/oauth2#285 · Filter by author DemoLiang opened on Jun 20, 2025

• Mixture of line endings

  go-oauth2/oauth2#278 · Filter by author coryschwartz opened on Feb 14, 2025

• Wrong PKCE padding in client example.

  go-oauth2/oauth2#275 · Filter by author coryschwartz opened on Feb 14, 2025

• Found no way to set the value of ForcePKCE to true

  go-oauth2/oauth2#274 · Filter by author Raisul191491 opened on Jan 19, 2025

• [QUESTION] - how to make username password work with oauth2

  go-oauth2/oauth2#270 · Filter by author oarkflow opened on Dec 20, 2024
  3

• [bug] About refreshing token

  go-oauth2/oauth2#268 · Filter by author MrXBear opened on Aug 10, 2024

• Validating redirect_uri via ValidateURIHandler is a bit weird

  go-oauth2/oauth2#267 · Filter by author asiraky opened on May 5, 2024
  1

• Retrieve the clientID using the token?

  go-oauth2/oauth2#263 · Filter by author jhoffmann opened on Apr 25, 2024

• Why must set UserAuthorizationHandler?

  go-oauth2/oauth2#259 · Filter by author xiaofengzs opened on Dec 7, 2023
  1

• AllowedCodeChallengeMethods is forced to include plain.

  go-oauth2/oauth2#258 · Filter by author james-lawrence opened on Dec 6, 2023

• configuring multiple domains for redirect_uri

  go-oauth2/oauth2#257 · Filter by author martinrode opened on Dec 4, 2023

• There is no method provided to clean up the specified clientid in the clientstore.

  go-oauth2/oauth2#255 · Filter by author Christian-health opened on Nov 3, 2023

• GetRedirectURI return sso code url err

  go-oauth2/oauth2#253 · Filter by author DemoLiang opened on Oct 24, 2023
  2

• Feature Request: use a local time.Now implementation through module to support testing

  go-oauth2/oauth2#252 · Filter by author mattbnz opened on Sep 28, 2023

• how to handle concurrency/unique sessions

  go-oauth2/oauth2#250 · Filter by author DennisMuchiri opened on Aug 27, 2023

• Is it possible to put the client id and client secret in headers instead of query params?

  go-oauth2/oauth2#249 · Filter by author src-kearney opened on Aug 3, 2023

• 我在go-zero中集成go-oauth2后，如何跨服务验证token

  go-oauth2/oauth2#248 · Filter by author tgy3300 opened on Jul 25, 2023
  1

• Does this library support authentication via google and facebook?

  go-oauth2/oauth2#242 · Filter by author HuyTX-LTS opened on Mar 27, 2023
  3

• [bug]failed to refresh token

  go-oauth2/oauth2#241 · Filter by author JYXL1 opened on Mar 20, 2023

• use base64.RawURLEncoding instead of trimming the padding

  go-oauth2/oauth2#240 · Filter by author bokunodev opened on Mar 18, 2023