Oauthcli is a terminal toolkit for testing and validating OAuth 2.0, OAuth 2.1, and OpenID Connect servers. It discovers authorization server capabilities, checks RFC conformance, obtains and inspects tokens, and audits installations with single commands, offering both human-readable and JSON output for agent integration.
OWASP cheatsheet covering OAuth 2.0 security best practices, including terminology for clients, authorization servers, resource owners, and resource servers. Describes access tokens, refresh tokens, and Proof of Possession tokens, along with essential security basics like preventing open redirectors and implementing PKCE for CSRF protection.