Skip to content

OAuth Overview

ss-keel-oauth is the official OAuth2 addon for Keel.

Current stable release: v1.10.0 (2026-04-22)
Depends on: ss-keel-jwt

  • Provider login flows for Google, GitHub, and GitLab.
  • Automatic JWT signing after a successful callback.
  • JSON and frontend redirect callback modes.
  • Generated typed config for provider credentials and route normalization.
  • Social login or SSO-style entry points for browser apps.
  • API backends that want a signed JWT returned after provider auth.
  • Keel services that already use ss-keel-jwt for protected routes.
  1. User hits /auth/<provider>.
  2. Provider callback returns to the generated Keel route.
  3. The addon normalizes the user info.
  4. jwtProvider signs the final token.