go-bananas

The application framework for Go that is so simple, it's Bananas. 🍌 A lean, server-side-rendered web core plus a small application-infrastructure layer β€” composed from focused packages, so you import only what you need. Get started API reference

go-bananas extracts the genuinely reusable pieces of a production SSR stack β€” a template renderer with SRI asset tags, composable middleware, CSRF, secure-cookie sessions, flash messages β€” and pairs them with pluggable secrets, keys, and a graceful HTTP server. One small Authenticator seam makes OIDC a wiring exercise, not a framework dependency.

Lean and composable

Flat, single-purpose packages. The core has no cloud or database dependencies β€” add what you need.

Secure by default

CSRF, secure headers, hot-reloadable secure-cookie sessions, and Subresource Integrity asset tags out of the box.

Pluggable seams

One Authenticator interface for OIDC. Self-registering secret/key providers. slog for logging. Bring your own.