# Install oauth2l with Homebrew, Nix Simple CLI for interacting with Google oauth tokens. Version 1.3.3 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:oauth2l ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install oauth2l ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#oauth2l ``` Evidence: nixpkgs package indexes: pkgs/by-name/oa/oauth2l/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:oauth2l - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.3.3 - **Source summary:** Simple CLI for interacting with Google oauth tokens - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - oauth2l (cli) - oauth2l (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.3.3 - Local data: ok - Upstream repository: https://github.com/google/oauth2l - Upstream latest detected: v1.3.3 (current) - info: No package-manager update timestamp was available. ## Project history and usage oauth2l, pronounced "oauth tool" in its README, is Google's Go CLI for fetching, printing, inspecting, testing, and using Google OAuth 2.0 access tokens from shell workflows. It is narrower than generic OAuth clients, but deeper in Google-specific authentication paths such as Google Cloud SDK credentials, Google Compute Engine and Google Kubernetes Engine service accounts, service-account JSON keys, domain-wide delegation examples, and cached local tokens. ### Project history The google/oauth2l repository was created on 2016-03-31, making it one of the older maintained Go CLIs in this batch. Its README frames the project around the practical problem of turning Google OAuth credentials into command-line access tokens that can be passed to tools such as curl. The project's 2022-07-19 v1.3.0 release was a security-oriented milestone: release notes added the three-legged OAuth loopback flow and PKCE support, replacing the deprecated copy-and-paste out-of-band pattern with a localhost redirect flow managed by oauth2l. Later releases in 2024 and 2025 focused on arm64 packaging, README updates, dependency upgrades, and vulnerability-scanner cleanup. ### Adoption history The repository metadata recorded 731 stars and 91 forks, which is substantial for a single-provider token utility. The README documents multiple distribution paths: precompiled binaries for Darwin, Linux, and Windows; Homebrew; a Google Container Registry image; source builds with Go; and tagged container images. Homebrew core packaged oauth2l with version 1.3.3 and the `oauth2l` executable in the 2026-07-01 formula JSON. The same formula recorded 1,500 installs over 365 days, showing broader package-manager use than the smaller Objective-C utilities in this batch. ### How it is used oauth2l's core commands map directly to shell auth workflows: `fetch` prints a bearer token, `header` formats it as an Authorization header, `curl` obtains a token and invokes curl, `info` prints token metadata, `test` validates a token via exit status, and `reset` clears the default `~/.oauth2l` cache. The README's examples show why it remains useful even in environments with full Google SDKs installed: it can use existing gcloud sessions, explicit credential files, service-account JWTs, domain-wide delegation, and ambient GCE or GKE service-account credentials, then hand the resulting token to ordinary command-line tools. ### Why package nerds care oauth2l is a classic glue package: small enough to install as a standalone executable, official enough to be trusted by Google API users, and practical enough to bridge heavyweight cloud authentication into scripts, tests, and ad hoc API calls. ### Timeline - 2016-03-31: the public GitHub repository was created. - 2022-07-19: v1.3.0 added the three-legged OAuth loopback flow and PKCE support. - 2025-04-02: v1.3.3 updated dependencies and the Go version to address vulnerability-scanner findings. - 2026-07-01: Homebrew core formula metadata listed stable version 1.3.3. ### Related projects - oauth2l pairs naturally with curl, Google Cloud SDK credentials, Google Cloud Console credential files, and Google service accounts. Compared with oauth2c, it trades generic OAuth breadth for Google-specific credential discovery and token workflows. ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Credential files - Unix: ~/.oauth2l ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** oauth2l - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - oauth2l: normalized package name match | nixpkgs package indexes: pkgs/by-name/oa/oauth2l/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Developer build packages](https://www.automicvault.com/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [oauth2c](https://www.automicvault.com/pkg/brew/oauth2c/) - Shares av.db curated category or tags: api-tools, authentication, cli, developer-tools, oauth2. - [docker-credential-helper](https://www.automicvault.com/pkg/brew/docker-credential-helper/) - Shares av.db curated category or tags: authentication, cli, developer-tools. - [github-keygen](https://www.automicvault.com/pkg/brew/github-keygen/) - Shares av.db curated category or tags: authentication, cli, developer-tools. - [grpcui](https://www.automicvault.com/pkg/brew/grpcui/) - Shares av.db curated category or tags: api-tools, cli, developer-tools, go. - [grpcurl](https://www.automicvault.com/pkg/brew/grpcurl/) - Shares av.db curated category or tags: api-tools, cli, developer-tools, go. - [twitch-cli](https://www.automicvault.com/pkg/brew/twitch-cli/) - Shares av.db curated category or tags: api-tools, cli, developer-tools. - [chroma](https://www.automicvault.com/pkg/brew/chroma/) - Shares av.db curated category or tags: cli, developer-tools, go. - [delve](https://www.automicvault.com/pkg/brew/delve/) - Shares av.db curated category or tags: cli, developer-tools, go. ## Combined YAML source View the package source record on GitHub. [combined/oauth2l.yml](https://github.com/automic-vault/db/blob/main/combined/oauth2l.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph