Feature Request: Support for IBKR OAuth 2.0 Authentication

[climbercarmich]

Hi ibind maintainers,

The "Advanced OAuth 1.0a" docs mention asking for info on OAuth 2.0 implementation. Based on recent IBKR documentation and communication, it seems they support OAuth 2.0 via the private_key_jwt method (RFC 7521/RFC 7523), using the https://api.ibkr.com/v1/api endpoint. (As an eligible business user, I'm currently onboarding with IBKR for this and might be able to provide more specifics later).

Adding support for this could potentially:

• Allow users with eligible accounts (currently business/institutional, possibly wider later) to run ibind in headless/automated environments without the gateway.
• Offer an alternative to the current OAuth 1.0a method, which relies on the unmaintained pyCrypto library.

Is supporting this OAuth 2.0 flow something the ibind project might consider, or are there existing plans related to it?

Thanks for any information!

[salsasepp]

Hi, thank you for bringing this up. Yes, ibind maintainers would greatly welcome any OAuth 2.0 contribution. Please see this related issue #87. Essentially, for lack of publicly available information, this can only be tackled if somebody can provide documentation and testing for OAuth 2.0, and ideally a pull request. In case you could do any of that, very much appreciated!

[climbercarmich]

Ok, as I get more info I will have a go at implementing this into ibind or at the least provide more info to help the implementation.