OIDC

OpenID Connect server (which is a standard developed on top of Oauth2 itself) for unix account authorization backends (a user mapping to a unix user).

Uses pamsock to avoid any priviledged permission.

Also reads user public data from their home directories (e.g. ~user/logo.png).

This is a reimplementation of the oauth2 server I was making and forgot where I left.

License

All code licensed under the GPL-2.0-only.

Known Issues

HTTP HEAD requests are not responded to properly, I'm exploring solutions but each one has its drawbacks to consider.