github.com/go-authn/oidc

Verify an OpenID Connect token into an identity — discovery, JWKS, and the refusals that matter. Pure Go, no dependencies