A Linux PAM module that authenticates SSH logins with GitHub's OAuth2 device flow — users approve on their phone, so there are no passwords and no SSH keys to distribute. Plain-C PAM module plus a Go broker enforcing org/team rules and username mapping.
linux ssh golang security oauth2 authentication pam sshd authorization sso github-oauth openssh device-flow passwordless pam-module linux-pam passwordless-authentication rfc8628 oauth2-device-flow device-authorization-grant
-
Updated
Aug 31, 2026 - Go