OAuth: Core Server Package

[Radiergummi]

Description

Standalone, framework-agnostic OAuth 2.1 authorization server package (@colibri-hq/oauth).

Implemented

• ✅ Core authorization server architecture
• ✅ Grant type handlers
• ✅ Token generation and validation
• ✅ Client authentication
• ✅ Scope validation

Remaining Work

• Complete RFC compliance testing
• Performance optimization
• Security audit
• Plugin system for extensions

Files

• Plan: plans/oauth-core-server.md
• Package: packages/oauth/

Getting Started

1. Review current OAuth package architecture
2. Audit RFC compliance
3. Add missing grant types