# Good open source OAuth server

**URL:** <https://discuss.write.as/t/good-open-source-oauth-server/1716>\
**Category:** Development\
**Created:** [August 13, 2020, 11:54am UTC](https://discuss.write.as/t/good-open-source-oauth-server/1716 "2020-08-13T11:54:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gytisrepecka](https://discuss.write.as/user_avatar/discuss.write.as/gytisrepecka/32/233_2.png) [@gytisrepecka](https://discuss.write.as/u/gytisrepecka)\
**Post date:** [August 13, 2020, 11:54am UTC](https://discuss.write.as/t/good-open-source-oauth-server/1716/1 "2020-08-13T11:54:00Z")

</div>

Can anyone advice good OAuth server?

Currently I’m using [Gitea as OAuth provider](https://docs.gitea.io/en-us/oauth2-provider/) (see my [pull request adding Gitea to WriteFreely OAuth](https://github.com/writeas/writefreely/pull/293)), but it [lacks scopes support](https://github.com/go-gitea/gitea/issues/4300).

What I need is hardware token support (YubiKey/Ledger) and classic TOTP as 2nd factor, scopes and interface customization options. It must be open source or visible source.

I was looking at [WP-Oauth](https://wp-oauth.com/) and [Hydra](https://www.ory.sh/hydra/) - anyone have experience with them already?

---

<div class="post-metadata">

**Author:** ![gytisrepecka](https://discuss.write.as/user_avatar/discuss.write.as/gytisrepecka/32/233_2.png) [@gytisrepecka](https://discuss.write.as/u/gytisrepecka)\
**Post date:** [August 17, 2020, 7:15am UTC](https://discuss.write.as/t/good-open-source-oauth-server/1716/2 "2020-08-17T07:15:22Z")

</div>

I decided to give **WP-OAuth** a try and in parallel continue exploring alternatives.