OAuth 2.0 Server

Brain Identity
Middleware

Standard OAuth 2.0 for secure third-party access to Brain accounts. Self-service app registration, no password exposure.

Get started Read docs

Standard OAuth 2.0

Authorization code + PKCE, token exchange, refresh and revoke per RFC.

Self-service console

Register apps, configure redirect URIs and rotate secrets anytime.

Built-in playground

Run authorize, token and userinfo with real parameters, without leaving the site.

Endpoints

GET  /oauth/authorize?client_id=…&redirect_uri=…&response_type=code&code_challenge=…
POST /oauth/token      grant_type=authorization_code&code=…&code_verifier=…
GET  /oauth/userinfo   Authorization: Bearer <access_token>
POST /oauth/revoke     token=<refresh_token>

Ready to build?

Create your first OAuth app in minutes.