PHP OAuth 2.0 Server
PHP Dotenv
PHP OAuth 2.0 Server | PHP Dotenv | |
---|---|---|
10 | 25 | |
6,458 | 12,945 | |
0.2% | - | |
8.9 | 5.2 | |
8 days ago | 6 months ago | |
PHP | PHP | |
MIT License | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PHP OAuth 2.0 Server
- Mobile application using website's PHP OAuth
-
What is the best way to implement an SSO for several existing web apps?
For creating a PHP OAuth2 server take a look at https://oauth2.thephpleague.com/ it is not a complete server, but will do most of the work for you.
-
The PHPer's Guide to OAuth
For the server side, I'll use the OAuth 2.0 server library. The implementation here is more complex, as there are many moving parts that need to be in place.
-
oAuth2 server for SPA app
I looked at the phpleague oauth2-server and there, they say that a SPA (front end in angular or react) should use Authorization code grant and not password grant (it seems password grant is not recommended to use anymore).
-
Oauth Authentication In Laravel: Social Login With Laravel Socialite
Laravel Passport facilitates full OAuth2 server implementation for Laravel Apps in less time. Developing an OAuth2 server from scratch can be tedious and time-consuming, but Laravel Passport is a local OAuth 2 server for Laravel apps. The Laravel Passport package embodies routes, middleware, and database migrations to develop an authorization server that will return access tokens for giving access permission to server resources. It uses the League OAuth2 Server package as a dependency and has a straightforward, easy-to-learn, and easy-to-implement language structure.
-
Zitadel: The best of Auth0 and Keycloak combined
Disclosure: I work for FusionAuth.
Depends on what you are looking for.
If you want a standalone auth server, you can use FusionAuth in docker/docker-compose: https://fusionauth.io/docs/v1/tech/installation-guide/docker
You can also package up a library; most major languages have one or more OAuth/OIDC libraries: https://github.com/doorkeeper-gem/doorkeeper for Ruby, https://spring.io/projects/spring-security for Spring/Java, https://oauth2.thephpleague.com/ for PHP, https://pypi.org/project/oauthlib/ for Python.
https://oauth.net/code/ has a further selection of libraries in a variety of languages.
- Is this a good way to secure my REST API?
-
RFC: Sealed classes
I completely agree with this!! Sometimes there's too much hubris in OSS; classes made final, methods made private- because the author has made their mind up about how the library should work and be used. But sometimes it's not possible to imagine every use case. If software is extensible and someone breaks their app by extending your library and doing something wrong, that's their problem. Take a look at this for example: https://github.com/thephpleague/oauth2-server/issues/885 here the authors don't want to make it more extensible because some people might encode too many claims into their tokens and run into problems with header size. Ffs get off your high horse and let people use their own judgement !! /rant
-
What library that can be used to implement simple user authentication?
https://github.com/thephpleague/oauth2-server is also good
-
Weekly "ask anything" thread
Otherwise, if I need something larger, then I would go towards OAuth and than in particular OAuth2 from the PHP league. It provides a good framework to work with to implement authentication in your project. Setting up is a bit of work, but when it works, you don't need to look at it again.
PHP Dotenv
-
PHP Authentication: Implementing Access Token
After successfully setting up our project, you'll observe that certain packages come pre-installed. One of these packages is vlucas/phpdotenv. This package serves the purpose of facilitating the loading of .env variables within your projects. These variables, stored in a file named '.env', allow for the configuration of various settings without hardcoding them directly into your code. Instead, you can define environment-specific variables such as database credentials, API keys, or any other sensitive information in the .env file, providing a more flexible and secure approach to configuration management.
-
Question Regarding Environment Variables
Recently, I jumped to reading on the documentation of the function putenv() and define() and the array $_ENV to understand the different between all. Also, I looked at the library phpdotenv and how it handles environment variables since its the standard approach to go with when dealing with environment variables in PHP.
- Hiding API keys in PHP ?!
-
Is it possible to store sensitive data on a shared hosting's DB?
So to get down to it, what are some of the best practices here? First off, things that you would normally do, like utilize some sort of secrets manager, that won't be available to you. You also can't utilize environment variables with apache. So you're going to have to have some sort of local secret (password/passphrase) to perform the encryption/decryption. With that said, mysql does provide AES encryption with their AES_ENCRYPT/AES_DECRYPT calls, so in that manner, yes you can safely store PII or other values in a shared MySQL. You can use a php library like https://github.com/vlucas/phpdotenv The decryption password(s) should be in the .ENV file Nothing prevents you from utilizing some scheme perhaps to provide multiple passwords if you want to, perhaps a separate one for each individual column you plan to encrypt.
-
Sending E-mails in PHP with PHPMailer
DotEnv - a popular library that allows us to use environment variables in our project.
-
Creating an application #1 - introduction
[PHP dotenv.](https://github.com/vlucas/phpdotenv) Loads environment variables from `.env` to `getenv(), $_ENV` and `$_SERVER`
-
Creating an application in Yii3.
PHP dotenv. Loads environment variables from .env to getenv(), $_ENV and $_SERVER automagically.
-
Help creating a JSON file to store database passwords outside of root folder
Use this library https://github.com/vlucas/phpdotenv. Hopefully you are using composer. If not, please consider using it.
-
How to Send an Email in Any Language Using the Nylas APIs
First, we need to have PHP installed as well as Composer (A dependency manager for PHP). Using Composer, we need to install dotenv which will allow us to read .env files.
-
The PHPer's Guide to OAuth
Here, I'm using the vlucas/phpdotenv library to process .env files.
What are some alternatives?
laravel-imap - Laravel IMAP is an easy way to integrate both the native php-imap module and an extended custom imap protocol into your Laravel app.
Symfony Dotenv - Registers environment variables from a .env file
Sign in with Apple for PHP - PHP library to verify and validate Apple IdentityToken and authenticate a user with Apple ID.
Expose - A beautiful, fully open-source, tunneling service - written in pure PHP
OAuth2 Server - documentation for the oauth2-server-php library
Safe - All PHP functions, rewritten to throw exceptions instead of returning false
Json Web Token - A simple library to work with JSON Web Token and JSON Web Signature
notion-sdk-php - PHP library for the official Notion API.
HybridAuth - Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
Square - PHP client library for the Square Connect APIs
php-jwt - PHP package for JWT
Symfony VarDumper - Provides mechanisms for walking through any arbitrary PHP variable