Service-to-service identity for Go

Orionis

OAuth 2.0 client credentials, signed JWT access tokens, JWKS validation, token caching, and GIN middleware in a compact Go toolkit.

Deploy container Read API guide

orders-service

POST /oauth/token

orionis-auth

JWT + JWKS

billing-api

Run locally

go run ./cmd/orionis-auth -config ./config/orionis.example.json

docker pull stremovskyy/orionis:0.3.1

docker pull ghcr.io/stremovskyy/orionis:0.3.1

Readable chain-first builders for clients, resource guards, and auth-server routes.
Ed25519 JWT signing by default with signer interfaces for KMS, Vault, HSM, or other algorithms.
Local JWT validation in resource services through JWKS, without per-request auth-server calls.
Docker Hub, GitHub Packages, and AWS ECS templates for simple deployment.