# oauth2c mit Homebrew, MacPorts, Nix, scoop installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für oauth2c in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:oauth2c ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install oauth2c ``` Evidenz: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install oauth2c ``` Evidenz: MacPorts ports tree: security/oauth2c/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#oauth2c ``` Evidenz: nixpkgs package indexes: pkgs/by-name/oa/oauth2c/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - Scoop (92%): ```sh scoop install main/oauth2c ``` Evidenz: Scoop official bucket manifest trees: bucket/oauth2c.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Paketfakten - **Paketschlüssel:** brew:oauth2c - **Paketmanager:** Homebrew - **Version:** 1.20.0 - **Quellzusammenfassung:** User-friendly CLI for OAuth2 - **Homepage:** - **Repository:** - **Zuletzt aktualisiert:** 2026-07-27T23:46:49+02:00 - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - oauth2c (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 1.20.0 ## Projektgeschichte und Nutzung oauth2c is a Go command-line client for exercising OAuth 2.0 and OpenID Connect flows against authorization servers. Its package-nerd appeal is that it packages a large cross-section of OAuth client behavior into one executable: authorization code, device, client credentials, JWT bearer, token exchange, refresh-token flows, PKCE, JARM, PAR, DPoP, RAR, private-key JWT, client-secret modes, and mutual-TLS-related endpoints. ### Projektgeschichte The public GitHub repository was created on 2022-06-27 under the Cloudentity lineage and later appears under SecureAuthCorp on GitHub, while Homebrew still records the homepage as the Cloudentity repository URL. The README presents oauth2c as a tool for making token-fetching experiments easier across basic and advanced OAuth/OIDC profiles rather than as a provider-specific helper. The release train reached v1.20.0 on 2026-04-29, with prebuilt release assets for Darwin and Linux architectures. That release metadata, combined with the small Go codebase and Homebrew source build, shows oauth2c evolving as a compact protocol-workbench CLI rather than a full identity platform. ### Adoptionsgeschichte Homebrew core packaged oauth2c as a normal formula with the `oauth2c` executable, Go as the build dependency, and version 1.20.0 in the 2026-07-01 formula JSON. Homebrew analytics for that formula recorded 357 installs over 365 days, which points to niche but real use among developers and identity engineers. The GitHub repository metadata recorded 925 stars and 50 forks, a stronger adoption signal than most one-purpose OAuth CLIs. Its README also links to Repology packaging status, indicating that the project is tracked beyond Homebrew. ### Wie es verwendet wird Developers use oauth2c to walk OAuth and OIDC flows from a terminal, often with a local callback listener for browser-based authorization-code flows. The README explicitly notes the default localhost callback URL, the option to suppress browser automation, request tracing, and `--silent` output for CI/CD or scripting. The tool is useful when debugging authorization-server behavior because it exposes knobs that many SDKs hide: response types and modes, token endpoint authentication methods, signed or encrypted request objects, pushed authorization requests, proof-of-possession tokens, scopes, audiences, resources, and explicit endpoint overrides. ### Warum Paket-Nerds sich dafür interessieren oauth2c is a good example of a package-manager-friendly security/developer tool: one static-feeling Go CLI, no runtime dependencies in Homebrew, broad standards coverage, and prebuilt upstream binaries. For av.db, it sits at the intersection of OAuth protocol testing, identity-provider integration, and shell automation. ### Zeitleiste - 2022-06-27: the public GitHub repository was created. - 2026-04-29: GitHub release v1.20.0 was published. - 2026-07-01: Homebrew core formula metadata listed stable version 1.20.0 and the `oauth2c` executable. ### Related projects - oauth2c overlaps with provider-specific token helpers such as Google's oauth2l, but it targets generic OAuth 2.0, OIDC, FAPI, and JWT profiles instead of a single cloud provider. ### Quellen - - - - ## Sicherheitshinweise narrow executable package without higher-risk signals. - **Geiger-Risiko:** grün / niedrig - narrow executable package without higher-risk signals ## Andere Paketmanager-Einträge - Nix - oauth2c: normalized package name match | nixpkgs package indexes: pkgs/by-name/oa/oauth2c/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - oauth2c: normalized package name match | MacPorts ports tree: security/oauth2c/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/oauth2c: normalized package name match | Scoop official bucket manifest trees: bucket/oauth2c.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/oauth2c.yml](https://github.com/mxcl/pkgdb/blob/main/combined/oauth2c.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph