shakha

https://github.com/Asrat77/shakha

Shakha is a headless OAuth broker engine for Rails APIs and monoliths. Your frontend does a single redirect; Shakha runs the OAuth dance (PKCE, state) against Google or GitHub, stores a revocable database-backed session, and redirects back with a session token usable via encrypted cookie or Authorization: Bearer. No JWTs issued, no Redis, no frontend SDK. Pre-1.0: APIs and security posture still evolving.