I'm currently living my dream, being paid to do what I love: programming, something I've been doing since middle school for over 15 years.

In those years doing programming, I’ve always thought that OpenID Connect/OAuth for Authentication is an amazing idea that more programmers should be familiar with. Using (properly configured) SSO may be one of the best security investment made by companies. It also saves a lot of works, both for companies (by delegating user management-related features to third party) and users (by reducing friction when using new services).

However, one of the challenges I encountered when I started learning this was that setting up an OIDC/OAuth server is too much work. I think there should be a better way to let people play with OIDC than creating dummy OAuth client in Github. Then, several months ago I decided that this would be a great excuse to play with Go & HTMX.

So I created Authduck. It's an OIDC Server/Provider that you can use to test your OIDC Client. I built it with Go, Echo framework, SQLite, HTMX, Alpine. The app is available as a single executable for Linux, Mac, & Windows, although admittedly I haven’t test it outside Linux yet. Its also available as Docker image via ghcr.io .

Currently there is a public instance at https://authduck.fly.dev . You could try it against other OIDC Playground Client such as openidconnect.net or others. Currently it only support Authorization Code Flow without PKCE, but I hope to find time soon to work on supporting other flows.

I hope this simple application could be of use to many web developers out there. Please let me know what you think.

Regards,

Azophy