WicketEmbed an authorization server in your Go service

OpenID Connect and OAuth 2.0 protocol endpoints, delivered as one http.Handler middleware. No separate process, nothing extra to operate.

Quick start

What is Wicket?

GitHub

One middleware, every endpoint

Authorize, token, discovery, JWKS, UserInfo, introspection, end-session and CIBA sit in front of the routes you already have. Anything else passes straight through to your app.

Endpoint list

You own the storage

Three families of storage ports with matching conformance suites. Use the official PostgreSQL adapter, or write one for any backend.

Persistence

Production-first defaults

A missing store fails assembly instead of silently falling back to memory, and Wicket never starts background goroutines — the host schedules cleanup.

Production checklist

Stateless token verification

oidcverify, wechatverify and phoneverify are standalone packages with no storage dependency — import one to validate Apple, Google, WeChat or phone-number sign-in credentials.

Local validation vs. exchange