Developers · SDKs
AuthGuard SDKs (TypeScript, Python, Java, .NET, Go)
The SDKs cover the integration surface (not the administration API), with the same behaviour in all five languages.
What do they cover?
| Area | What they do |
|---|---|
| Approval requests | Machine token (client_credentials), create with Idempotency-Key, read, cancel, wait for a decision |
| Webhooks | Standard Webhooks HMAC-SHA-256 verification of events |
| Receipts | Request digest and receipt binding checks (steps 1 to 3) |
| OpenID Connect | Discovery, PKCE S256 authorization URL, callback checks, code exchange, ID token validation with the JWKS |
Which SDKs are there?
| SDK | Package |
|---|---|
| TypeScript / Node.js | @authguard/sdk |
| Python | authguard-sdk (imports authguard) |
| Java | pt.authguard:authguard-sdk |
| .NET | AuthGuard.Sdk |
| Go | the sdks/go folder (package authguard) |
All are at version 0.1.0. They are not published to public registries yet: install them from the repository (the sdks/ folder) your provider gives you.
Common behaviour
- They retry with jittered exponential backoff on 429, 502, 503, 504 and network errors for idempotent calls. Non-idempotent calls (cancel, code exchange) are retried only when the server answered 429/503 with
Retry-After. - They honour
Retry-Afterup to 60 seconds. - A per-attempt timeout of 10 seconds by default.
- No logging; secrets and tokens never appear in error messages.
Contract and tests
The contract is the OpenAPI docs/openapi/authguard-v1.yaml. Every SDK's tests read the same recorded answers and test vectors (the sdks/fixtures folder), which the server's tests also use, so they sign the same bytes.
Error codes in this article
Was this page helpful?
Thank you. Your answer stays in this browser; nothing is sent.
Sorry about that. Try:
- searching for the exact text of the message or the error code
- the error code index
- asking your organization's administrator