Cool to see Kratos mentioned here! A friend spent a bit of time coming up with a miniature OAuth provider implemented in Benthos (https://www.benthos.dev/) and Bloblang (https://www.benthos.dev/docs/guides/bloblang/about/). It is designed to serve a single OAuth client app and will generate JWT access tokens with limited lifetime: https://gist.github.com/disintegrator/0bd39879c437c4b3abb277...