kivra/oauth2_client

This system is an Erlang OAuth 2.0 client library designed to simplify interactions with OAuth-enabled REST services. It supports multiple authentication flows, including Client Credentials and Google service account JWTs, while managing token caching and automatic re-authentication. The library decouples HTTP transport from core logic and integrates with OpenTelemetry for distributed tracing.

This entry introduces the oauth2\_client library, an Erlang tool designed to simplify consuming OAuth2-enabled REST services by wrapping the restc HTTP client and handling automatic re-authentication for expired access tokens. The release supports Client Credentials Grant, Resource Owner Password Credentials Grant, and a specific flow for Microsoft Azure AD. It includes comprehensive documentation with usage examples for standard OAuth2 and Twitter, along with build tooling via rebar3, elvis code style checks, and dependency locking.

(repo-wide) · high confidence

This change introduces the oauth2c library, providing an Erlang-based OAuth 2.0 client. It supports multiple grant types, including service account JWT tokens (Google) and client credentials (Microsoft Azure), and allows callers to supply custom HTTP transports. The library includes a built-in token cache with configurable TTL to handle token reuse and race conditions, and integrates with OpenTelemetry for distributed tracing.

src · high confidence

The \include/oauth2c.hrl\ file introduces the core data structures and type definitions for the OAuth2 client library. It defines the \\#service\_account\ record for Google service account JWT tokens and the \\#client\ record to manage OAuth2 state, including support for client credentials in the request body. Additionally, it establishes a \request\_fun\ type, allowing callers to supply a custom HTTP transport function for making requests, thereby decoupling the library from a specific HTTP client implementation.

include · high confidence

Added new Common Test suites (\oauth2c\_SUITE\ and \oauth2c\_token\_cache\_SUITE\) to verify the OAuth2 client's token retrieval, caching, and refresh behaviors. The tests cover client credentials passing (in body vs. header), token caching with expiration, concurrent request handling (burst), and automatic token refresh on 401 responses.

test · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 50 → 50 (+0.8)
• Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 33 → 33 (+0.0)
• Readiness 59 → 55 (-3.4)
• Security 61 → 76 (+15.1)

• Coverage not measured — no coverage collector is wired up
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Off-boarding risk: anonymized user #1

• Medium CVE: [GHSA redacted] (rebar.lock)
• Off-boarding risk: anonymized user #1

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

kivra/oauth2_client was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.