oauth2-server-php

A library for implementing an OAuth2 Server in php

3,272

945

3,272

288

View on GitHub

Top Related Projects

oauth2-server

6,654

A spec compliant, secure by default PHP OAuth 2.0 Server

Quick Overview

OAuth2-server-php is a PHP library for implementing an OAuth 2.0 server. It provides a complete and standards-compliant implementation of the OAuth 2.0 protocol, allowing developers to easily add OAuth 2.0 authorization to their PHP applications.

Pros

Fully compliant with OAuth 2.0 specifications
Supports multiple grant types (Authorization Code, Implicit, User Credentials, Client Credentials, Refresh Token)
Extensive documentation and examples
Active community and maintenance

Cons

Requires PHP 5.3.9 or higher, which may be limiting for some legacy systems
Learning curve for developers new to OAuth 2.0 concepts
Limited built-in support for more advanced OAuth 2.0 features (e.g., PKCE)

Code Examples

Creating an OAuth 2.0 server:

$storage = new OAuth2\Storage\Pdo(array('dsn' => $dsn, 'username' => $username, 'password' => $password));
$server = new OAuth2\Server($storage);

$server->addGrantType(new OAuth2\GrantType\AuthorizationCode($storage));

Handling an authorization request:

$request = OAuth2\Request::createFromGlobals();
$response = new OAuth2\Response();

if (!$server->validateAuthorizeRequest($request, $response)) {
    $response->send();
    die;
}

// Display an authorization form

Issuing an access token:

$request = OAuth2\Request::createFromGlobals();
$response = new OAuth2\Response();
$server->handleTokenRequest($request)->send();

Getting Started

Install the library using Composer:

composer require bshaffer/oauth2-server-php

Set up your storage and create an OAuth 2.0 server:

$storage = new OAuth2\Storage\Pdo(['dsn' => 'mysql:dbname=oauth2;host=localhost', 'username' => 'root', 'password' => '']);
$server = new OAuth2\Server($storage);
$server->addGrantType(new OAuth2\GrantType\AuthorizationCode($storage));

Implement the necessary endpoints (authorize, token) in your application and use the server to handle requests.

Competitor Comparisons

oauth2-server

6,654

A spec compliant, secure by default PHP OAuth 2.0 Server

Pros of oauth2-server

More actively maintained with frequent updates and releases
Better documentation and examples for easier implementation
Supports more modern PHP versions (7.2+) and follows PSR standards

Cons of oauth2-server

Steeper learning curve for beginners due to more complex architecture
Requires more setup and configuration compared to oauth2-server-php
May have performance overhead in some scenarios due to its abstraction layers

Code Comparison

oauth2-server-php:

$server = new OAuth2\Server($storage);
$server->addGrantType(new OAuth2\GrantType\AuthorizationCode($storage));
$server->handleTokenRequest(OAuth2\Request::createFromGlobals())->send();

oauth2-server:

$server = new \League\OAuth2\Server\AuthorizationServer(
    $clientRepository,
    $accessTokenRepository,
    $scopeRepository,
    $privateKey,
    $encryptionKey
);
$server->enableGrantType(new \League\OAuth2\Server\Grant\AuthCodeGrant($authCodeRepository, $refreshTokenRepository, $authCodeTTL));
$response = $server->respondToAccessTokenRequest($request, $response);

Both libraries provide OAuth 2.0 server implementations, but oauth2-server offers a more modern and flexible approach with better long-term support. However, oauth2-server-php may be simpler for basic use cases and legacy PHP versions.