macOS
brew install oauth2lprovider-native install command
brew / 順位 2465
oauth2l のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
brew install oauth2lprovider-native install command
概要
Simple CLI for interacting with Google oauth tokens
履歴
oauth2l, pronounced "oauth tool" in its README, is Google's Go CLI for fetching, printing, inspecting, testing, and using Google OAuth 2.0 access tokens from shell workflows. It is narrower than generic OAuth clients, but deeper in Google-specific authentication paths such as Google Cloud SDK credentials, Google Compute Engine and Google Kubernetes Engine service accounts, service-account JSON keys, domain-wide delegation examples, and cached local tokens.
The google/oauth2l repository was created on 2016-03-31, making it one of the older maintained Go CLIs in this batch. Its README frames the project around the practical problem of turning Google OAuth credentials into command-line access tokens that can be passed to tools such as curl.
The project's 2022-07-19 v1.3.0 release was a security-oriented milestone: release notes added the three-legged OAuth loopback flow and PKCE support, replacing the deprecated copy-and-paste out-of-band pattern with a localhost redirect flow managed by oauth2l. Later releases in 2024 and 2025 focused on arm64 packaging, README updates, dependency upgrades, and vulnerability-scanner cleanup.
The repository metadata recorded 731 stars and 91 forks, which is substantial for a single-provider token utility. The README documents multiple distribution paths: precompiled binaries for Darwin, Linux, and Windows; Homebrew; a Google Container Registry image; source builds with Go; and tagged container images.
Homebrew core packaged oauth2l with version 1.3.3 and the `oauth2l` executable in the 2026-07-01 formula JSON. The same formula recorded 1,500 installs over 365 days, showing broader package-manager use than the smaller Objective-C utilities in this batch.
oauth2l's core commands map directly to shell auth workflows: `fetch` prints a bearer token, `header` formats it as an Authorization header, `curl` obtains a token and invokes curl, `info` prints token metadata, `test` validates a token via exit status, and `reset` clears the default `~/.oauth2l` cache.
The README's examples show why it remains useful even in environments with full Google SDKs installed: it can use existing gcloud sessions, explicit credential files, service-account JWTs, domain-wide delegation, and ambient GCE or GKE service-account credentials, then hand the resulting token to ordinary command-line tools.
oauth2l is a classic glue package: small enough to install as a standalone executable, official enough to be trusted by Google API users, and practical enough to bridge heavyweight cloud authentication into scripts, tests, and ad hoc API calls.
セキュリティ状態
narrow executable package without higher-risk signals.
リスク グリーン · 信頼度 低 · appliance
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/.oauth2l実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
oauth2l | 実行可能ファイル | インデックス済み実行可能ファイル | ローカル実行可能ファイルインデックスから検出されました。 |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
インストールメタデータ
| パッケージキー | brew:oauth2l |
|---|---|
| バージョン | 1.3.4 |
| パッケージマネージャ | Homebrew |
| ホームページ | https://github.com/google/oauth2l |
| リポジトリ | https://github.com/google/oauth2l |
| 最終更新 | 2026-07-27T23:46:49+02:00 |
| Pulse | updated |
| Bottle | 未記録 |
| サービス | 宣言なし |
ソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.