Docs menu: Overview

Demo-ready OAuth sign-in for Gleam

Real OAuth sign-in for your Gleam demo, in minutes.

Vestibule gives demos and prototypes a real provider round-trip: a consistent request and callback flow with normalized auth results, PKCE, CSRF state, provider strategies, and Wisp or Mist middleware. It has not been security audited — keep it out of production. Your app remains responsible for its user accounts and sessions.

Build your install block

See how the callback flow works

Identity provider

RequestURL, state, PKCE verifier
StoreBind transient callback data
CallbackValidate and normalize user info

Signed-in session in your app

Start here

Build the dependency block for your app.

Choose your server and identity provider. Vestibule prepares the Git dependencies and links to the applicable implementation path.

1. Server
2. Provider
3. Install

Step 1 of 3Which server does your app use?

WispRecommended for Wisp appsMistUse middleware handlersAnother routerOwn the OAuth routes

Compare route paths

Step 2 of 3Which provider should users sign in with?

Pick the account type your demo audience already uses. Apple requires the most provider setup.

GitHubFastest fit for developer-focused demosGoogleGoogle and Google Workspace accountsMicrosoftPersonal, work, and school accountsAppleRequires HTTPS and a client-secret JWT

Compare provider behavior

Step 3 of 3

The Wisp + GitHub dependency block is ready.

Add this block to gleam.toml. The quick start explains how to handle requests, callbacks, and sessions.

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_github = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_github" }
vestibule_wisp = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_wisp" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_google = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_google" }
vestibule_wisp = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_wisp" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_microsoft = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_microsoft" }
vestibule_wisp = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_wisp" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_apple = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_apple" }
vestibule_wisp = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_wisp" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_github = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_github" }
vestibule_mist = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_mist" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_google = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_google" }
vestibule_mist = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_mist" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_microsoft = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_microsoft" }
vestibule_mist = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_mist" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_apple = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_apple" }
vestibule_mist = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_mist" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_github = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_github" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_google = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_google" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_microsoft = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_microsoft" }

[dependencies]
vestibule = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0" }
vestibule_apple = { git = "https://github.com/tylerbutler/vestibule.git", ref = "v0", path = "packages/vestibule_apple" }

Continue with Wisp

Review GitHub provider details

Keep the callback boundary explicit.

Vestibule validates provider callbacks. Your app stores callback data and manages user sessions.

Vestibule handles

Strong state values and PKCE
Callback state validation
Normalized provider identities

Your app handles

Short-lived callback storage
Account and session mapping
Safe failure and retry UX

Review your app's responsibilities

Follow the request and callback path. Then connect the normalized auth result to your application's session.

Open the quick start