Provider-Agnostic OAuth Authentication for 'shiny' Applications R package shinyOAuth version 0.5.0 Provides a simple, configurable, provider-agnostic 'OAuth 2.0' and 'OpenID Connect' (OIDC) authentication framework for 'shiny' applications using 'S7' classes. Defines providers, clients, and tokens, as well as various supporting functions and a 'shiny' module. Features include cross-site request forgery (CSRF) protection, state encryption, 'Proof Key for Code Exchange' (PKCE) handling, validation of OIDC identity tokens (nonces, signatures, claims), automatic user info retrieval, asynchronous flows, and hooks for audit logging. Software Depends: R (>= 4.1.0) Imports: S7 (>= 0.2.0), R6 (>= 2.0), rlang (>= 1.0.0), shiny (>= 1.7.0), jsonlite (>= 1.0), openssl (>= 2.0.0), httr2 (>= 1.1.0), urltools (>= 1.7.3), cachem (>= 1.1.0), jose (>= 1.2.0), lifecycle (>= 1.0.0), cli (>= 3.0.0), htmltools (>= 0.5.0), otel (>= 0.2.0) Suggests: testthat (>= 3.0.0), knitr, rmarkdown, webfakes, promises, mirai (>= 2.0.0), future, withr, later, callr, chromote, sodium, shinytest2, xml2, otelsdk Luka Koning <koningluka@gmail.com> Comprehensive R Archive Network (CRAN) Luka Koning [aut, cre, cph] MIT + file LICENSE (https://CRAN.R-project.org/package=shinyOAuth/LICENSE) 2026-05-23 application/tgz https://CRAN.R-project.org/package=shinyOAuth doi:10.32614/CRAN.package.shinyOAuth