InternalAuthor2025

PeakCore Auth

An OAuth 2.0 identity provider written from scratch.

What it is

Centralized OAuth 2.0 Identity Provider built from scratch. Mandatory PKCE, RS256 JWT with key rotation, rotating refresh tokens with family-based reuse detection, Google SSO passthrough, Admin API.

Checkable facts

  • Mandatory PKCE on every authorization flow
  • RS256 JWT with scheduled key rotation
  • Refresh-token families with reuse detection