Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install pocket-id

local Homebrew formula metadata

Linux

Alpine Linux apkverifiziert · 92%

sudo apk add pocket-id

Alpine Linux edge package indexes · pocket-id · Quelle: dl-cdn.alpinelinux.org

Nixverifiziert · 92%

nix profile install nixpkgs#pocket-id

nixpkgs package indexes · pkgs/by-name/po/pocket-id/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Open-source identity provider for secure user authentication

Projektlinks

Befehle und Aliase

pocket-id

Verlauf

Projektgeschichte und Nutzung

Pocket ID is a self-hosted OpenID Connect Certified and OAuth 2.0 identity provider that uses passwordless authentication, primarily passkeys.

Projektgeschichte

Pocket ID began as an open-source, passkey-focused identity provider and subsequently added formal OAuth 2.0 and OpenID Connect capabilities, API automation, broader database support and deployment tooling.

The project progressed through pre-1.0 and 1.x releases to Pocket ID 2.0 in January 2026. Version 2 made the encryption key mandatory, moved signing keys into the database and introduced explicit database locking.

Adoptionsgeschichte

Pocket ID is positioned for small teams, startups and homelabs that want an OpenID Connect provider without operating a broader enterprise identity suite. Its documentation includes client examples and authentication-proxy workflows for applications with and without native OIDC support.

Distribution as a single binary and container, together with built-in SQLite and documented Homebrew and NixOS installation methods, made it approachable in self-hosted package and homelab workflows.

Wie es verwendet wird

Operators configure Pocket ID through environment variables or a .env file, supply APP_URL and ENCRYPTION_KEY, create OIDC clients and connect relying-party applications through the discovery endpoint.

Passkeys require HTTPS outside localhost. Pocket ID therefore commonly runs behind a reverse proxy, while its data directory stores the default SQLite database and uploaded assets.

Warum Paket-Nerds sich dafür interessieren

Pocket ID occupies a deliberately narrow niche: a compact, self-hosted identity provider centered on passkeys and OIDC. It is attractive when Keycloak or Authentik would add more operational surface than a deployment needs.

The combination of a single executable, SQLite defaults, environment-file configuration and standard OIDC discovery makes it easy to compose with packaged reverse proxies and self-hosted applications.

Zeitleiste

2026: Pocket ID 2.0 was released with a new encryption-key requirement and database-locking behavior.
2026: The 2.x line continued expanding OIDC, provisioning and administrative capabilities.

Related projects

OIDC-compatible applications can use Pocket ID directly. Authentication proxies can extend it to applications without OIDC support, while Caddy, nginx and Traefik are documented HTTPS front ends.

Quellen

Sicherheitslage

Risikostufe: orange

formula declares a Homebrew service.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

formula declares a Homebrew service

Signale

metadata:service

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Formelmetadaten deklarieren einen Service- oder Daemon-Block.
Homebrew-Bottle-Metadaten sind für 5 Plattformziele verfügbar.
Build-Metadaten listen 3 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ./.env

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ./.env

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`pocket-id`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-11-04

Manager-Version2.19.2

Manager aktualisiert2026-11-02

lokale DatenOK

Upstreamaktuell

neueste erkannte Versionv2.19.2

https://github.com/pocket-id/pocket-id

OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:pocket-id
Version	2.19.2
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/pocket-id
Homepage	https://pocket-id.org
Repository	https://github.com/pocket-id/pocket-id
Upstream-Dokumentation	https://pocket-id.org
Lizenz	BSD-2-Clause
Quellarchiv	https://github.com/pocket-id/pocket-id/archive/refs/tags/v2.19.2.tar.gz
Zuletzt aktualisiert	2026-11-02T20:55:14Z
Pulse	updated
Build-Abhängigkeiten	go, node, pnpm
Bottle	verfügbar (auf arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux)
Homebrew post-install	nicht definiert
Dienst	declared

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	pocket-id
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

pocket-id

nix profile install nixpkgs#pocket-id

normalized package name match
Abgeglichen nach: Pocket ID

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/po/pocket-id/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

pocket-id 2.9.0-r1

Simple OIDC provider that allows users to authenticate with passkeys

https://pocket-id.org/

sudo apk add pocket-id

License: BSD-2-Clause
Architecture: x86_64
Source Package: pocket-id
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pocket ID

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pocket-id from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

pocket-id-openrc 2.9.0-r1

Simple OIDC provider that allows users to authenticate with passkeys (OpenRC init scripts)

https://pocket-id.org/

sudo apk add pocket-id-openrc

License: BSD-2-Clause
Architecture: x86_64
Source Package: pocket-id
normalized package name match
Abgeglichen nach: Pocket ID

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pocket-id-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/pocket-id.yml

Verwendete Quellen

Geiger risk classifier
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment
pkg.so package database
pkgdb category and tag curation

pocket-id mit Homebrew, apk, Nix installieren