Turn your Convex backend into an OAuth 2.1/OpenID Connect provider, enabling secure authentication for third-party apps and services.
npm install @codefox-inc/oauth-providerOAuth 2.1 / OpenID Connect Provider for Convex Auth (Beta).
Use @codefox-inc/oauth-provider to turn your Convex backend into a full OAuth 2.1 provider. The component handles authorization codes, access tokens, and user consent flows, allowing external apps to authenticate against your Convex data.
The oauth-provider component integrates with Convex Auth to provide OAuth 2.1 and OpenID Connect server functionality. It enables your Convex app to issue access tokens and handle third-party authentication requests while maintaining user data in your existing backend.
Deploy oauth-provider to enable external applications to authenticate users through your Convex backend. The component provides standard OAuth endpoints for authorization, token exchange, and user info retrieval, making your app an identity provider for other services.
Yes, @codefox-inc/oauth-provider is designed to integrate with Convex Auth installations. It extends your existing authentication setup to provide OAuth server capabilities, allowing third-party apps to authenticate against your user base while maintaining your current auth flows.
The oauth-provider component supports OAuth 2.1 authorization code flow with PKCE and OpenID Connect. It handles authorization requests, token exchanges, refresh tokens, and provides standard OAuth endpoints for client applications to integrate with your Convex backend.
The oauth-provider component is currently in beta. While it implements OAuth 2.1 and OpenID Connect standards, you should thoroughly test it in your specific use case and monitor for updates before deploying to production environments.
The oauth-provider component requires client registration in your Convex backend. You define allowed redirect URIs, client credentials, and scopes through Convex functions, giving you full control over which applications can authenticate against your OAuth provider.