About Brain OAuth
Brain OAuth is Brain's open authorization service. Apps integrate through the standard OAuth 2.0 flow, users sign in with their Brain account in one step, and apps receive only the data the user approved.
What we care about
Safe by default
Users see exactly what each app asks for and can say no. Secrets are shown once; public clients must use PKCE.
Open standards
Authorization code, refresh and revocation, fully implemented. Any standard OAuth client library works.
Built for developers
Create an app in minutes, then use the docs and playground to get the flow working before launch.
Standards
OAuth 2.0RFC 6749Bearer TokenRFC 6750PKCERFC 7636Token RevocationRFC 7009OpenAPI 3
Current versionv2.3.0