pulunomoe/puluauth

Super simple, client credentials grant only OAuth2 server. Build on top of PHPLeague's OAuth2 server.

Requirements

Clone this repository.
Install the dependencies:
composer install && composer dump-autoload.
Run the database scripts inside the db directory.
Generate a private key:
openssl genrsa -aes128 -passout pass:YOUR_PASSWORD_HERE_ -out private.key 2048
Generate a public key:
openssl rsa -in private.key -passin pass:YOUR_PASSWORD_HERE -pubout -out public.key
Generate an encryption key:
vendor/bin/generate-defuse-key > defuse.key
Put the keys inside the keys directory (make sure it's not publicly accessible!)
Change the access level of the keys to 600, i.e:
chmod 600 *.keys
Run the app with your web server, with the public directory as the root directory.
Open the admin panel (/admin/login), use the default admin username and password configuration: admin / admin
Change your admin password.
Optionally, modify your network so the /admin path only accessible from trusted hosts.