One of the folks behind OauthBible. Have you looked into Kong [1]? We built it as Open-Source proxy (based on NGINX) that has many out-of-the-box plugins for A

One of the folks behind OauthBible. Have you looked into Kong [1]? We built it as Open-Source proxy (based on NGINX) that has many out-of-the-box plugins for Authentication: including JWT [2], HMAC and the tedious OAuth2 [3]. For example, Kong reduces the complexity of adding OAuth2 to your services in just a restful POST request, similar to this: $ curl -X POST http://kong:8001/apis/{api}/plugins http://kong:8001/apis/{api}/plugins \ --data "name=oauth2" \ --data "config.scopes=email,phone,address" \ --data "config.mandatory_scope=true" Another alternative is Auth0.com but it's cloud based and Kong is obviously a fully featured API Gateway that does many other things so it might be too heavy if all you need is authentication. [1] https://github.com/Mashape/kong https://github.com/Mashape/kong [2] https://getkong.org/plugins/jwt/ https://getkong.org/plugins/jwt/ [3] https://getkong.org/plugins/oauth2-authentication/ https://getkong.org/plugins/oauth2-authentication/