OAuth 2.0 Client VS skeleton

League/oauth2-client has a lot of implementations

Have a look on this one https://oauth2-client.thephpleague.com/

In regards to oauth the phpleague packages are fairly popular. Again, the flow requires some redirect dancing so not something that can be (simply) just a single boolean-returning method on the PHP side. Additionally, oauth is a relatively weak standard (Especially where you want to verify identity) in which case platform specific actions/tweaks are needed hence why most use platform-specific oauth libraries. OIDC builds upon oauth to standardize the flow, including getting the identity, but it isn't supported by all platforms offering oauth.

For the client side, I'll be using the library league/oauth2-client.

"Login with Google/Facebook/Twitter/etc": That's called OAuth2 and quite easy to implement. This package is good OAuth2 client to start.

I'd recommend using a library - for Azure AD OAuth we've been using https://github.com/thephpleague/oauth2-client + https://github.com/thenetworg/oauth2-azure (see also https://oauth2-client.thephpleague.com/providers/thirdparty/ )

For Azure AD, I'd recommend the combination of https://github.com/thephpleague/oauth2-client for the authentication part (getting the token) and the Microsoft Graph SDK for then using the token to get information about the user https://github.com/microsoftgraph/msgraph-sdk-php

Here's a good example of that: https://github.com/thephpleague/oauth2-client/blob/master/.gitattributes

Some go for lighter things. https://thephpleague.com/ once you get their router and container running you probably have everything you need. Simple query builders that are usually also helpful (eg. https://github.com/skipperbent/pecee-pixie and https://github.com/TCB13/sequel-mongo-php) for most projects.

As feedback, use an orm instead of making your own db logic and have a look at https://github.com/thephpleague/skeleton as project skeleton... Ow and use a template engine.

and this https://thephpleague.com/

I put together this sample project, which leverages two libraries created by The PHP League and will be discussed in the following sections of this article. If you want to follow along, go ahead and clone the repository.

With mentions of Stop the War in so many places lately, I wonder, are there any wars that people would support? As in "Keep up the effort, brave soldiers". Any takers?

One tool destined for the PHP community and maintained by The PHP League is OpenAPI PSR-7 Message Validator, a package validating PSR-7 HTTP messages against OpenAPI definitions.