For those who are looking for an alternative and are OK with centralization of Auth which is somewhat different from the goals of OAuth, check out the CAS stand

For those who are looking for an alternative and are OK with centralization of Auth which is somewhat different from the goals of OAuth, check out the CAS standard -- it's an alternative to SAML more so than OAuth. It's so simple I wrote (and abandoned) a golang library that implements v1[2]. I didn't need the proxy abilities in v2 (and doubt most orgs actually do) and I use JSON in some places before it was in the standard but it was very easy to implement and thus I can say it's easy to understand. I've meant to convert the project to Rust for a long time but at this point I'll probably never get to it. [0]: https://apereo.github.io/cas/4.2.x/protocol/CAS-Protocol-Specification.html https://apereo.github.io/cas/4.2.x/protocol/CAS-Protocol-Spe... [1]: https://apereo.github.io/cas/4.2.x/protocol/CAS-Protocol.html https://apereo.github.io/cas/4.2.x/protocol/CAS-Protocol.htm... [2]: https://github.com/t3hmrman/casgo https://github.com/t3hmrman/casgo