Gluu is possibly an off-the-shelf solution: https://www.gluu.org (I’m not deeply familiar with its authorization capabilities)