{"id":36487808,"url":"https://github.com/shelmangroup/oidc-agent","last_synced_at":"2026-01-12T01:53:01.583Z","repository":{"id":57498457,"uuid":"156434929","full_name":"shelmangroup/oidc-agent","owner":"shelmangroup","description":"Cross platform OIDC agent","archived":false,"fork":false,"pushed_at":"2023-02-24T17:40:15.000Z","size":3448,"stargazers_count":11,"open_issues_count":2,"forks_count":1,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-06-20T08:14:12.528Z","etag":null,"topics":["jwt","kubernetes","oidc"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shelmangroup.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-11-06T19:16:08.000Z","updated_at":"2024-03-05T00:09:41.000Z","dependencies_parsed_at":"2024-06-20T07:12:19.232Z","dependency_job_id":"f702840d-4625-4bac-98de-282d590aff8f","html_url":"https://github.com/shelmangroup/oidc-agent","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/shelmangroup/oidc-agent","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shelmangroup%2Foidc-agent","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shelmangroup%2Foidc-agent/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shelmangroup%2Foidc-agent/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shelmangroup%2Foidc-agent/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shelmangroup","download_url":"https://codeload.github.com/shelmangroup/oidc-agent/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shelmangroup%2Foidc-agent/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28331263,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-12T00:36:25.062Z","status":"ssl_error","status_checked_at":"2026-01-12T00:36:15.229Z","response_time":60,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["jwt","kubernetes","oidc"],"created_at":"2026-01-12T01:53:00.900Z","updated_at":"2026-01-12T01:53:01.578Z","avatar_url":"https://github.com/shelmangroup.png","language":"Go","readme":"# oidc-agent\n[![CircleCI](https://circleci.com/gh/shelmangroup/oidc-agent.svg?style=svg)](https://circleci.com/gh/shelmangroup/oidc-agent)\n\nA cross platform OIDC agent that will manange your OIDC tokens through a single gRPC API,\ninspired by ssh-agent/gpg-agent. Agent will automaticly refresh token upon expiry. Perfect\ntool for writing command line applications or debug your OIDC application from the command line\nwith tools like `curl`.\n\nThe agent can also be used as a credential helper for services like `kubernetes` or `git`.\n\n## Usage\n\n### Installation\n#### Scoop\n```\nscoop bucket add shelmangroup https://github.com/shelmangroup/scoops.git\nscoop install oidc-agent\n```\n\n### Create a Oauth2 client ID.\n\nCreate a new client ID/Secret at your preferred provider (defaults to google cloud)\nwith the callback url set to `http://localhost`.\n\n### Start a new login dance.\n\nStarta a new OIDC login flow with a google cloud. (will open a browser for you to complete the login)\n\nExample:\n```bash\n$ oidc-agent login \\\n  --client-id xyz.apps.googleusercontent.com \\\n  --client-secret hT-bK074kBbbYBpO7USsFTiO \\\n  -n my-app\n```\n\nStarta a new OIDC login flow with another provider.\n\nExample:\n```bash\n$ oidc-agent login \\\n  -p https://mycompany.eu.auth0.com \\\n  --client-id login-app \\\n  --client-secret NotSoSecret \\\n  --callback-port 31337 \\\n  --extra-scope offline_access \\\n  --audience https://my-app.example.com/ \\\n  -n my-app\n\n```\n\nThis will cache the initial credentials in `~/.config/oidc-agent/my-app` or `%UserProfile%\\AppData\\Roaming\\oidc-agent\\my-app` on windows.\n\n### Fetch credentials\n\nwill output `access_token`, `id_token`, and `token_expiry` in json format.\n```bash\n$ oidc-agent get -n my-app\n```\n\nAdd authorization header\n```bash\n$ curl -H \"$(oidc-agent get -n my-app --auth-header -o id_token)\" https://my-app.example.com\n```\n\n### kubectl credential helper\n\n```bash\n$ kubectl config set-credentials \\\n  --auth-provider=gcp \\\n  --auth-provider-arg=cmd-path=/path/to/oidc-agent \\\n  --auth-provider-arg=cmd-args=\"get -n my-cluster-cred\" \\\n  --auth-provider-arg=token-key='{.access_token}' \\\n  --auth-provider-arg=expiry-key='{.token_expiry}' \\\n  my-cluster-cred\n```\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshelmangroup%2Foidc-agent","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshelmangroup%2Foidc-agent","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshelmangroup%2Foidc-agent/lists"}