nulab/scala-oauth2-provider

This system is a Scala-based OAuth 2.0 provider library that manages authentication flows, including authorization codes, client credentials, and refresh tokens. It supports modern security standards like PKCE and provides a modular architecture for handling protected resources and token endpoints. The library is designed for integration with frameworks like Play and Akka HTTP, offering comprehensive error handling and validation for OAuth requests.

The legacy OAuth2 provider implementation has been removed from the codebase. This change deletes the Play 2-specific \TokenController\ and the core \scala-provider\ components, including the \DataHandler\ trait, \EndPoint\ logic, and all grant handlers (Authorization Code, Refresh Token, Client Credentials, and Password). Consequently, the associated test suites for these components have also been removed.

play2-provider, scala-provider · high confidence

The README has been significantly expanded to provide comprehensive setup instructions for Play Framework, Akka HTTP, and other frameworks, along with detailed code examples for implementing the DataHandler trait and using AuthInfo. The configuration file .scalafmt.conf has been added to enforce code formatting with Scala 3 dialect, and the .gitignore file has been updated to exclude the .bsp directory.

(repo-wide) · high confidence

The library introduces a new provider architecture in src/main/scala/scalaoauth2/provider, adding support for PKCE (RFC 7636) via new \codeChallenge\ and \codeChallengeMethod\ fields in \AuthInfo\ and \CodeChallengeMethod\ types. The core authorization flow is now structured around dedicated traits (\AuthorizationHandler\, \GrantHandler\, \ProtectedResourceHandler\) and request models (\AuthorizationRequest\, \ProtectedResourceRequest\) that replace the previous monolithic \Request\ class. Error handling is improved by making \OAuthError\ exceptions carry their description as the exception message and correcting HTTP status codes (e.g., \RedirectUriMismatch\ now returns 400/invalid\_request instead of 401).

src/main · high confidence

Added a new suite of unit tests in src/test/scala/scalaoauth2/provider covering core OAuth2 functionality, including access token expiration logic, authorization header parsing (OAuth and Bearer schemes), authorization code and client credentials grant flows, implicit and password grant handling, protected resource validation, refresh token operations, and PKCE code challenge method parsing. The tests also verify correct HTTP status codes for various OAuth error scenarios and ensure the TokenEndpoint correctly routes and validates requests.

src/test · high confidence

The project now uses a build.sbt file to define its build settings, establishing scala-oauth2-core as the project name with a default Scala version of 3.3.0 and cross-compilation support for 2.13.12, 2.12.18, and 2.11.12. Test dependencies are explicitly set to scalatest 3.2.17 and logback-classic 1.4.11, and the build is configured to publish to Sonatype OSS repositories.

(dependencies) · high confidence

The project has upgraded its build tool from SBT version 0.13.0 to 1.9.6, requiring users to ensure their local environment supports the newer SBT 1.x series. Additionally, the legacy sbt-idea plugin has been removed and replaced with sbt-scalafmt (version 2.5.2) to handle code formatting, changing how developers generate IDE project files and format code.

project · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• First survey — no prior run to compare against. CAI 53.

• Code Health 100
• Architecture 69
• Maturity 30
• Readiness 65
• Security 92

• 275 commits — 250 feature/other, 25 fixes

• (root) — 101 commits
• scala-oauth2-core/src — 52 commits
• project/Build.scala — 36 commits
• (repo) — 35 commits
• play2-oauth2-provider/src — 23 commits
• .github/workflows — 12 commits
• src/main — 5 commits
• src/test — 5 commits
• project/build.properties — 3 commits
• .github/dependabot.yml — 1 commit
• akka-http-oauth2-provider/src — 1 commit
• scala-provider/src — 1 commit

• fix: #6 fix Authentication header get key name by case insensitive
• fix: Authorization Header Specification fixes (#110)
• fix: Fix #47: Add implicit grant
• fix: Fix StringIndexOutOfBoundException when client sent invalid Authorization parameter
• fix: Fix deprecation warning
• fix: Fix document and format code
• fix: Fix some warnings
• fix: Fixed #68
• fix: Fixed Implicit grant does not support the issuance of refresh tokens #70
• fix: Fixed implicit override
• fix: Merge pull request #14 from centraldesktop/bugfix/rfc6749-section5.1
• fix: bugfix() http://tools.ietf.org/html/rfc6749#section-5.1
• fix: fix MatchError on auth header parameter
• fix: fix Play name
• fix: fix README
• fix: fix access token error doesn't have WWW-Authenticate in header
• fix: fix comparing mill seconds for access token
• fix: fix crossScalaVersions (#160)
• fix: fix description
• fix: fix package object #74
• …and 255 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

nulab/scala-oauth2-provider was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.