# laravel/passport

Laravel Passport provides OAuth2 server support to Laravel.

Repository: https://github.com/laravel/passport
Canonical: https://ross.abutalabs.com/products/laravel-passport
Homepage: https://laravel.com/docs/passport
Language: PHP
License: MIT
License Family: permissive
Topics: laravel, passport, oauth
Last push: 2026-08-11T14:13:15+00:00

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 97, longevity 100
- inputs: {"age_days": 3705, "days_push": 22, "days_rel": 22, "gap_med": 14.0, "n_releases_24m": 31}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3413, forks 800 (observed 2026-08-28T04:08:03.540404+00:00)

## What it is
Laravel Passport is an OAuth2 server package for Laravel applications, built on the League OAuth2 server. It issues and manages access tokens, refresh tokens, and clients across all standard OAuth2 grants including authorization code with PKCE, client credentials, password, and device authorization.

## Use cases
- add oauth2 server to a laravel app
- issue api access tokens with scopes
- authenticate mobile and spa clients via oauth2
- implement client credentials grant for machine-to-machine auth
- manage oauth clients and revoke refresh tokens
- protect laravel api routes with token middleware

## When to choose
- your Laravel application must support the full OAuth2 protocol
- you need third-party clients to obtain tokens for your API
- you need multiple grant types like authorization code with PKCE or device flow

## When to avoid
- you only need simple API tokens or SPA authentication - use Laravel Sanctum instead
- you are not using the Laravel framework
- you need a standalone OAuth2 identity provider rather than an in-app package

## Facets
- artifact type: library
- maturity: active
- function: auth, api-framework, middleware
- domain: web-development, backend, security, apis
- platform: php, self-hosted
- tags: oauth2, laravel, api-authentication, access-tokens, pkce, personal-access-tokens, web-server

## Member repositories
- laravel/passport (main) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:03.540404+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:38:30.011377+00:00, confidence not recorded.
  - readme: https://github.com/laravel/passport (fetched 2026-08-28T04:08:03.540404+00:00, sha c384358d5b51)
  - homepage: https://laravel.com/docs/passport (fetched 2026-08-29T09:32:32.172903+00:00, sha 8d3e55de12da)
  - site_page: https://laravel.com/framework/docs/releases (fetched 2026-08-29T09:32:32.180698+00:00, sha 67498d0f3692)
  - site_page: https://laravel.com/framework/docs/upgrade (fetched 2026-08-29T09:32:32.183020+00:00, sha 4d6c0fc37e99)
  - site_page: https://laravel.com/framework/docs/contributions (fetched 2026-08-29T09:32:32.185033+00:00, sha 683d89b609fc)
  - site_page: https://laravel.com/framework/docs/installation (fetched 2026-08-29T09:32:32.186880+00:00, sha 116b85d6ed8c)
  - site_page: https://laravel.com/framework/docs/configuration (fetched 2026-08-29T09:32:32.190924+00:00, sha 7d113b54ec22)
  - site_page: https://laravel.com/framework/docs/ai (fetched 2026-08-29T09:32:32.194204+00:00, sha 410fc0e008c4)
  - site_page: https://laravel.com/framework/docs/structure (fetched 2026-08-29T09:32:32.196404+00:00, sha d1ff408b057e)
  - site_page: https://laravel.com/framework/docs/frontend (fetched 2026-08-29T09:32:32.199029+00:00, sha 34f51b18165a)
- Data as of 2026-08-30T08:39:29.467469+00:00.