如何在产品环境中保护我的GO REST服务？

Question

I'm recently dealing with Go REST services, but I don't know if there any production-ready OAUTH2 server available?

As my services will be consumed by a single-paged web app as well as mobile clients, and users should be able to register their accounts, so I'm thinking about an OAUTH2 server.

I've been searching around and found that the standard package contains only the client side code https://github.com/golang/oauth2/blob/master/oauth2.go.

There is an OAUTH2 server built in Go (https://github.com/RangelReale/osin), but I don't have much expertise to review it.

Therefore, what are the options available for production applications? Should I use an OAUTH server implemented in another technology like nodejs because of their maturity?

EDIT: In .Net space there is a server implementation at https://github.com/identityserver/IdentityServer3

However, I would prefer something in GO.

Answer 1

Right after I asked the question, CoreOS released "dex" as an open source OpenID provider at https://github.com/coreos/dex