License & attribution
License
Wicket is released under the Apache License 2.0. You may use, modify and distribute it in commercial or non-commercial projects, provided you keep the license text and attribution notices (the LICENSE and NOTICE files at the repository root).
The text and sample code on this documentation site are also provided under the Apache License 2.0.
Code origins and attribution
Wicket is an independent Go implementation. Parts of its code were ported or adapted from the following open-source projects and are used under their respective licenses:
| Origin | License | Copyright holder |
|---|---|---|
| IdentityServer4 (version 4.1.x and earlier) | Apache License 2.0 | Brock Allen & Dominick Baier |
| ASP.NET Core authentication libraries, Microsoft.IdentityModel | MIT License | .NET Foundation and Contributors |
- Every ported file keeps its original copyright header and states its modifications.
- A per-file origin table is available in
PROVENANCE.mdat the repository root. - The ported versions were released under the Apache License 2.0, a perpetual and irrevocable grant that is not affected by later upstream license changes.
Wicket has no affiliation with, partnership with, or endorsement from the authors of the projects above or their organizations. Project names appear only to describe code origins; all trademarks belong to their respective owners.
Dependencies
Main third-party libraries Wicket depends on at runtime:
| Library | Purpose | License |
|---|---|---|
github.com/lestrrat-go/jwx/v3 | JWT / JWK signing and validation | MIT |
github.com/lestrrat-go/httprc/v3 | Remote JWKS fetching and caching | MIT |
github.com/tidwall/gjson | JSON path queries | MIT |
github.com/google/uuid | Unique identifiers | BSD-3-Clause |
github.com/aliyun/alibaba-cloud-sdk-go | Number verification (used only by phoneverify) | Apache-2.0 |
github.com/gonewx/godi | Compile-time dependency injection | MIT |
Trademarks
Google, Apple, Facebook, WeChat, Alibaba Cloud and other names mentioned in this documentation are trademarks of their respective owners. They are used only to identify integration targets and imply no partnership or endorsement.