# Install oauth2c with Homebrew, MacPorts, Nix, scoop User-friendly CLI for OAuth2. Version 1.20.0 via Homebrew; verified 2026-07-04. ## Install ```sh sudo av install brew:oauth2c ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install oauth2c ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install oauth2c ``` Evidence: MacPorts ports tree: security/oauth2c/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#oauth2c ``` Evidence: nixpkgs package indexes: pkgs/by-name/oa/oauth2c/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - Scoop (92%): ```sh scoop install main/oauth2c ``` Evidence: Scoop official bucket manifest trees: bucket/oauth2c.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:oauth2c - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.20.0 - **Source summary:** User-friendly CLI for OAuth2 - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-04T16:53:44+09:00 - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - oauth2c (cli) - oauth2c (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.20.0 - Package-manager updated: 2026-07-04 - Local data: ok - Upstream repository: https://github.com/SecureAuthCorp/oauth2c - Upstream latest detected: v1.20.0 (current) ## Project history and usage oauth2c is a Go command-line client for exercising OAuth 2.0 and OpenID Connect flows against authorization servers. Its package-nerd appeal is that it packages a large cross-section of OAuth client behavior into one executable: authorization code, device, client credentials, JWT bearer, token exchange, refresh-token flows, PKCE, JARM, PAR, DPoP, RAR, private-key JWT, client-secret modes, and mutual-TLS-related endpoints. ### Project history The public GitHub repository was created on 2022-06-27 under the Cloudentity lineage and later appears under SecureAuthCorp on GitHub, while Homebrew still records the homepage as the Cloudentity repository URL. The README presents oauth2c as a tool for making token-fetching experiments easier across basic and advanced OAuth/OIDC profiles rather than as a provider-specific helper. The release train reached v1.20.0 on 2026-04-29, with prebuilt release assets for Darwin and Linux architectures. That release metadata, combined with the small Go codebase and Homebrew source build, shows oauth2c evolving as a compact protocol-workbench CLI rather than a full identity platform. ### Adoption history Homebrew core packaged oauth2c as a normal formula with the `oauth2c` executable, Go as the build dependency, and version 1.20.0 in the 2026-07-01 formula JSON. Homebrew analytics for that formula recorded 357 installs over 365 days, which points to niche but real use among developers and identity engineers. The GitHub repository metadata recorded 925 stars and 50 forks, a stronger adoption signal than most one-purpose OAuth CLIs. Its README also links to Repology packaging status, indicating that the project is tracked beyond Homebrew. ### How it is used Developers use oauth2c to walk OAuth and OIDC flows from a terminal, often with a local callback listener for browser-based authorization-code flows. The README explicitly notes the default localhost callback URL, the option to suppress browser automation, request tracing, and `--silent` output for CI/CD or scripting. The tool is useful when debugging authorization-server behavior because it exposes knobs that many SDKs hide: response types and modes, token endpoint authentication methods, signed or encrypted request objects, pushed authorization requests, proof-of-possession tokens, scopes, audiences, resources, and explicit endpoint overrides. ### Why package nerds care oauth2c is a good example of a package-manager-friendly security/developer tool: one static-feeling Go CLI, no runtime dependencies in Homebrew, broad standards coverage, and prebuilt upstream binaries. For av.db, it sits at the intersection of OAuth protocol testing, identity-provider integration, and shell automation. ### Timeline - 2022-06-27: the public GitHub repository was created. - 2026-04-29: GitHub release v1.20.0 was published. - 2026-07-01: Homebrew core formula metadata listed stable version 1.20.0 and the `oauth2c` executable. ### Related projects - oauth2c overlaps with provider-specific token helpers such as Google's oauth2l, but it targets generic OAuth 2.0, OIDC, FAPI, and JWT profiles instead of a single cloud provider. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** oauth2c - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - oauth2c: normalized package name match | nixpkgs package indexes: pkgs/by-name/oa/oauth2c/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - oauth2c: normalized package name match | MacPorts ports tree: security/oauth2c/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/oauth2c: normalized package name match | Scoop official bucket manifest trees: bucket/oauth2c.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Developer build packages](https://www.automicvault.com/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [oauth2l](https://www.automicvault.com/pkg/brew/oauth2l/) - Shares av.db curated category or tags: api-tools, authentication, cli, developer-tools, oauth2. - [twitch-cli](https://www.automicvault.com/pkg/brew/twitch-cli/) - Shares av.db curated category or tags: api-tools, cli, developer-tools. - [docker-credential-helper](https://www.automicvault.com/pkg/brew/docker-credential-helper/) - Shares av.db curated category or tags: authentication, cli, developer-tools. - [github-keygen](https://www.automicvault.com/pkg/brew/github-keygen/) - Shares av.db curated category or tags: authentication, cli, developer-tools. - [graphql-cli](https://www.automicvault.com/pkg/brew/graphql-cli/) - Shares av.db curated category or tags: api-tools, cli, developer-tools. - [grpcui](https://www.automicvault.com/pkg/brew/grpcui/) - Shares av.db curated category or tags: api-tools, cli, developer-tools. - [grpcurl](https://www.automicvault.com/pkg/brew/grpcurl/) - Shares av.db curated category or tags: api-tools, cli, developer-tools. - [kubelogin](https://www.automicvault.com/pkg/brew/kubelogin/) - Shares av.db curated category or tags: authentication, cli, developer-tools, oidc. ## Combined YAML source View the package source record on GitHub. [combined/oauth2c.yml](https://github.com/automic-vault/db/blob/main/combined/oauth2c.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph