pkg.soopen package index

brew / 排名 2458

使用 Homebrew, Nix 安装 oauth2l

查看 oauth2l 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install oauth2l

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#oauth2l

nixpkgs package indexes · pkgs/by-name/oa/oauth2l/package.nix · 来源: api.github.com

概览

软件包摘要

Simple CLI for interacting with Google oauth tokens

命令和别名

  • oauth2l

历史

项目历史与用法

oauth2l, pronounced "oauth tool" in its README, is Google's Go CLI for fetching, printing, inspecting, testing, and using Google OAuth 2.0 access tokens from shell workflows. It is narrower than generic OAuth clients, but deeper in Google-specific authentication paths such as Google Cloud SDK credentials, Google Compute Engine and Google Kubernetes Engine service accounts, service-account JSON keys, domain-wide delegation examples, and cached local tokens.

项目历史

The google/oauth2l repository was created on 2016-03-31, making it one of the older maintained Go CLIs in this batch. Its README frames the project around the practical problem of turning Google OAuth credentials into command-line access tokens that can be passed to tools such as curl.

The project's 2022-07-19 v1.3.0 release was a security-oriented milestone: release notes added the three-legged OAuth loopback flow and PKCE support, replacing the deprecated copy-and-paste out-of-band pattern with a localhost redirect flow managed by oauth2l. Later releases in 2024 and 2025 focused on arm64 packaging, README updates, dependency upgrades, and vulnerability-scanner cleanup.

采用历史

The repository metadata recorded 731 stars and 91 forks, which is substantial for a single-provider token utility. The README documents multiple distribution paths: precompiled binaries for Darwin, Linux, and Windows; Homebrew; a Google Container Registry image; source builds with Go; and tagged container images.

Homebrew core packaged oauth2l with version 1.3.3 and the `oauth2l` executable in the 2026-07-01 formula JSON. The same formula recorded 1,500 installs over 365 days, showing broader package-manager use than the smaller Objective-C utilities in this batch.

使用方式

oauth2l's core commands map directly to shell auth workflows: `fetch` prints a bearer token, `header` formats it as an Authorization header, `curl` obtains a token and invokes curl, `info` prints token metadata, `test` validates a token via exit status, and `reset` clears the default `~/.oauth2l` cache.

The README's examples show why it remains useful even in environments with full Google SDKs installed: it can use existing gcloud sessions, explicit credential files, service-account JWTs, domain-wide delegation, and ambient GCE or GKE service-account credentials, then hand the resulting token to ordinary command-line tools.

为什么软件包爱好者会关心

oauth2l is a classic glue package: small enough to install as a standalone executable, official enough to be trusted by Google API users, and practical enough to bridge heavyweight cloud authentication into scripts, tests, and ad hoc API calls.

时间线

  • 2016-03-31: the public GitHub repository was created.
  • 2022-07-19: v1.3.0 added the three-legged OAuth loopback flow and PKCE support.
  • 2025-04-02: v1.3.3 updated dependencies and the Go version to address vulnerability-scanner findings.
  • 2026-07-01: Homebrew core formula metadata listed stable version 1.3.3.

Related projects

  • oauth2l pairs naturally with curl, Google Cloud SDK credentials, Google Cloud Console credential files, and Google service accounts. Compared with oauth2c, it trades generic OAuth breadth for Google-specific credential discovery and token workflows.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.oauth2l

可执行文件

已安装的可执行文件

命令类型暴露范围备注
oauth2l可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本1.3.4
管理器更新时间2026-07-27
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:oauth2l
版本1.3.4
软件包管理器Homebrew
主页https://github.com/google/oauth2l
仓库https://github.com/google/oauth2l
最后更新2026-07-27T23:46:49+02:00
Pulseupdated
Bottle未记录
服务未声明

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

oauth2l

nix profile install nixpkgs#oauth2l
  • normalized package name match
  • 匹配方式:Oauth2l
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/oa/oauth2l/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation