@mostajs/auth-flow

OAuth 2.0 Device Authorization Grant (RFC 8628) + Authorization Code with PKCE (RFC 8252) — provider-agnostic, reusable across CLIs / SDKs / mobile apps. Token issuance delegated via DI to host (e.g. @mostajs/api-keys).

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

Keywords

Version	Deps	Published