PHP OAuth 2.0 Server

A spec compliant, secure by default PHP OAuth 2.0 Server (by thephpleague)

PHP OAuth 2.0 Server Alternatives

Similar projects and alternatives to PHP OAuth 2.0 Server

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better PHP OAuth 2.0 Server alternative or higher similarity.

PHP OAuth 2.0 Server reviews and mentions

Posts with mentions or reviews of PHP OAuth 2.0 Server. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-03-04.
  • Mobile application using website's PHP OAuth
    3 projects | /r/PHPhelp | 4 Mar 2023
  • What is the best way to implement an SSO for several existing web apps?
    3 projects | /r/PHP | 25 Nov 2022
    For creating a PHP OAuth2 server take a look at https://oauth2.thephpleague.com/ it is not a complete server, but will do most of the work for you.
  • The PHPer's Guide to OAuth
    7 projects | dev.to | 21 Nov 2022
    For the server side, I'll use the OAuth 2.0 server library. The implementation here is more complex, as there are many moving parts that need to be in place.
  • oAuth2 server for SPA app
    3 projects | /r/PHP | 1 Oct 2022
    I looked at the phpleague oauth2-server and there, they say that a SPA (front end in angular or react) should use Authorization code grant and not password grant (it seems password grant is not recommended to use anymore).
  • Oauth Authentication In Laravel: Social Login With Laravel Socialite
    2 projects | dev.to | 5 Jul 2022
    Laravel Passport facilitates full OAuth2 server implementation for Laravel Apps in less time. Developing an OAuth2 server from scratch can be tedious and time-consuming, but Laravel Passport is a local OAuth 2 server for Laravel apps. The Laravel Passport package embodies routes, middleware, and database migrations to develop an authorization server that will return access tokens for giving access permission to server resources. It uses the League OAuth2 Server package as a dependency and has a straightforward, easy-to-learn, and easy-to-implement language structure.
  • Zitadel: The best of Auth0 and Keycloak combined
    6 projects | news.ycombinator.com | 17 May 2022
    Disclosure: I work for FusionAuth.

    Depends on what you are looking for.

    If you want a standalone auth server, you can use FusionAuth in docker/docker-compose: https://fusionauth.io/docs/v1/tech/installation-guide/docker

    You can also package up a library; most major languages have one or more OAuth/OIDC libraries: https://github.com/doorkeeper-gem/doorkeeper for Ruby, https://spring.io/projects/spring-security for Spring/Java, https://oauth2.thephpleague.com/ for PHP, https://pypi.org/project/oauthlib/ for Python.

    https://oauth.net/code/ has a further selection of libraries in a variety of languages.

  • Is this a good way to secure my REST API?
    2 projects | /r/PHPhelp | 15 May 2022
  • RFC: Sealed classes
    7 projects | /r/PHP | 2 Mar 2022
    I completely agree with this!! Sometimes there's too much hubris in OSS; classes made final, methods made private- because the author has made their mind up about how the library should work and be used. But sometimes it's not possible to imagine every use case. If software is extensible and someone breaks their app by extending your library and doing something wrong, that's their problem. Take a look at this for example: https://github.com/thephpleague/oauth2-server/issues/885 here the authors don't want to make it more extensible because some people might encode too many claims into their tokens and run into problems with header size. Ffs get off your high horse and let people use their own judgement !! /rant
  • Weekly "ask anything" thread
    8 projects | /r/PHP | 6 Sep 2021
    Otherwise, if I need something larger, then I would go towards OAuth and than in particular OAuth2 from the PHP league. It provides a good framework to work with to implement authentication in your project. Setting up is a bit of work, but when it works, you don't need to look at it again.
  • A note from our sponsor - Mergify
    blog.mergify.com | 27 Sep 2023
    Solutions like Dependabot or Renovate update but don't merge dependencies. You need to do it manually while it could be fully automated! Add a Merge Queue to your workflow and stop caring about PR management & merging. Try Mergify for free. Learn more →

Stats

Basic PHP OAuth 2.0 Server repo stats
10
6,366
0.0
20 days ago
Collect and Analyze Billions of Data Points in Real Time
Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.
www.influxdata.com