Crate oauth_toolkit 

Shared OAuth2/OIDC primitives — crypto, PKCE, scopes, CSRF, social login, OIDC, JWKS validation.

Provides reusable building blocks for OAuth2 authorization code flows, OIDC SSO, social login (GitHub, Google), desktop loopback redirect capture with PKCE, token exchange/refresh, and mail provider presets (Gmail, Outlook, Yahoo, AOL, Fastmail).

Modules

crypto

Cryptographic helpers for OAuth2 tokens and secrets.

csrf

CSRF state management with pluggable backends.

jwt

Lightweight JWT helpers for HS256 operations.

loopback

Desktop loopback redirect capture (RFC 8252 §7.3).

oidc

OIDC discovery, token exchange, and user info.

oidc_validator

JWKS-backed OIDC token validation.

pkce

RFC 7636 PKCE (Proof Key for Code Exchange) support.

providers

Mail provider presets for desktop IMAP/SMTP XOAUTH2 flows, plus the canonical endpoint URL constants shared by all provider modules.

redirect

Redirect URI validation for OAuth2.

scope

OAuth2 scope parsing and validation.

social

Social login providers (GitHub, Google).

token

OAuth2 token endpoint operations: authorization-code exchange (with PKCE verifier) and refresh-token rotation.