OIDC command line client for Windows

Windows OIDC: A compact command-line utility

This small, free utility provides a command-line interface for interacting with OpenID Connect (OIDC) providers on Windows. It streamlines authentication tasks, making it simple to obtain tokens and manage user sessions without relying on a graphical interface.

Intended audience

• Developers building or integrating OIDC-based authentication into applications.
• System administrators and IT specialists who prefer scriptable, non-GUI tools for access management.
• QA engineers and implementers who need a lightweight solution for testing and debugging OIDC flows.

Key capabilities

• Token retrieval and session handling for common OIDC scenarios.
• Support for multiple authentication flows (for example: authorization code, device code, and client credentials).
• Minimal footprint and fast startup, optimized for command-line workflows.
• Simple commands that make it easy to authenticate and request userinfo or access-protected APIs.
• Helpful for troubleshooting OIDC configurations and debugging token exchanges.

When to use this tool

• Automating authentication in scripts and CI/CD pipelines.
• Verifying OIDC provider behavior during development or integration testing.
• Managing service-to-service authentication using client credentials.
• Running quick, repeatable checks of token scopes and claims.

Other tools to consider

• oauth2l — command-line helpers for OAuth 2.0 and Google APIs.
• oidc-client-cli — lightweight CLI utilities focused on OIDC interactions.
• oauth2-proxy — a reverse proxy that provides OAuth2/OIDC authentication for web apps.
• SDKs and libraries in your preferred language when you need tighter application integration.

Quick start example

1. Configure provider and client information (replace values with your data).
2. Run an authentication command to request an access token:
3. oidc-cli authenticate --issuer https://auth.example.com --client-id YOUR_CLIENT_ID --scope "openid profile email"
4. Use the returned access token to call a protected API:
5. curl -H "Authorization: Bearer " https://api.example.com/userinfo

This tool is especially valuable when you need a reliable, scriptable way to perform OIDC authentication on Windows without a full graphical toolset.