botnyx/fusionauth-php-client

PHP client library for FusionAuth

FusionAuth PHP Client

If you're integrating FusionAuth with a PHP application, this library will speed up your development time.

For additional information and documentation on FusionAuth refer to https://fusionauth.io.

Examples Usages:

Install the Code

To use the client library on your project simply copy the PHP source files from the src directory to your project or the following Composer package.

Packagist

• https://packagist.org/packages/fusionauth/fusionauth-client

composer require fusionauth/fusionauth-client

Create the Client

$apiKey = "5a826da2-1e3a-49df-85ba-cd88575e4e9d";
$client = new FusionAuth\FusionAuthClient($apiKey, "http://localhost:9011");

Login a user

$applicationId = "68364852-7a38-4e15-8c48-394eceafa601";

$request = array();
$request["applicationId"] = $applicationId;
$request["email"] = "joe@fusionauth.io";
$request["password"] = "abc123";
$result = client->login(json_encode($request));
if (!$result->wasSuccessful()) {
 // Error
}

// Hooray! Success

Openid-Connect:

$options = array(
	"openidProvider"=>'Your IDP provider, host -or- absolute-url',
	"clientId"=>'Capt.Obvious', /* optional, needed for generating login link */
	"clientSecret"=>'Capt.Obvious', /* optional, needed for generating login link */
	"redirectUrl"=>'Capt.Obvious' /* optional, needed for generating login link */
);
$oidcclient = new FusionAuth\OidcClient( $options);

echo "<a href='".$oidcclient->AuthorizationCodeGrantRequest()."'>Login</a><br>";


if( $_GET['code'] && $_GET['state']  ){
	try {
		$response = $oidcclient->getTokenFromCode($_GET['code'] );
	}catch( Exception $e){
		print_r($e);die();
	}
	
	$jwkset = $oidcclient->jwkset;
	
// All options
$result = $oidcclient->validate($response->access_token)
		->algs(['RS256', 'RS512']) //
		->exp() // We check the "exp" claim
		->iat(1000) // We check the "iat" claim. Leeway is 1000ms (1s)
		->aud("f7aae31e-63ca-4719-9b3f-8ca942efc942") // Allowed audience
		->iss(['ISSUED']) // Allowed issuer
		->key($jwkset) // Key used to verify the signature
		->run();
	
	
// Less options
$result = $oidcclient->validate($response->access_token)->aud("f7aae31e-63ca-4719-9b3f-8ca942efc942")->run();
	
print_r($result);
}