/php-oauth2-client

Very simple OAuth 2.0 client

Primary LanguagePHPMIT LicenseMIT

Introduction

This is a very simple to use OAuth 2.0 client. It has minimal dependencies.

NOTE: if you are not bound to PHP 5.4, you are probably better of using the OAuth 2.0 client of the League of Extraordinary Packages! It can be found here.

Features

  • Simplicity
  • Works with PHP >= 5.4
  • Minimal dependencies;
  • Supports OAuth refresh tokens.
  • Easy integration with your own application and/or framework;
  • Does not enforce a framework on you;
  • Only "authorization code" profile support, will not implement anything else;
  • Only conforming OAuth 2.0 servers will work, this library will not get out of its way to deal with services that violate the OAuth 2.0 RFC;
  • There will be no toggles to shoot yourself in the foot;
  • Uses paragonie/constant_time_encoding for constant time encoding;
  • Uses paragonie/random_compat polyfill for CSPRNG;
  • Uses symfony/polyfill-php56 polyfill for hash_equals;

You MUST configure PHP in such a way that it enforces secure cookies! See this resource for more information.

API

The API is very simple to use. See the example/ folder for a working example!

Security

As always, make sure you understand what you are doing! Some resources:

License

MIT.