Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello Ory Team and Community, two questions:

1. Are there any recommended generic OAuth2.0 / OIDC Libraries for Authorization Code Flow + PKCE for Single-Page-Applications without a Client Secret for JavaScript (NextJS)? The recommended libraries on <https://www.ory.sh/docs/hydra/guides/using-oauth2|https://www.ory.sh/docs/hydra/guides/using-oauth2> are not meant for Browsers and <https://github.com/panva/oauth4webapi|https://github.com/panva/oauth4webapi> offers mostly low-level APIs.
2. Is there any recommended development workflow for OAuth2.0? It seems like that `ory tunnel` and `ory proxy` is especially for Ory Identity. It kinda works for OAuth but, for example, the Issuer Claim of the ID-Token gets issued for &lt;project-slug-url&gt; instead of the Hostname of the local proxy, where I point my lib at.
Thank a lot, Max :v: 

oauth4webapi is pretty easy to use.

Edit - Sorry, I didn’t mean to send this to the channel, and I can’t delete it.

Yeah, you are right Brandon, thanks for your input. Was just curious if there are other recommendations beside oauth4webapi.