thephpleague/oauth2-server
A spec compliant, secure by default PHP OAuth 2.0 Server observed · 2026-08-28
Health v2 · maintenance only
87/100
- Activity 89
- Release rhythm 78
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 38
- age_days: 5203
- days_rel: 69
- days_push: 69
- n_releases_24m: 8
Adoption not part of the score
6662 stars · 1136 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
A standards-compliant OAuth 2.0 authorization server library for PHP, supporting all major grants (authorization code, client credentials, password, refresh, implicit, device) and RFCs 6749, 6750, 7519, 7636, and 8628. It is PSR-7 based and integrates with frameworks like Laravel, Symfony, Slim, and Drupal.
Use cases
- issue OAuth 2.0 access tokens for my API
- implement an authorization code grant server in PHP
- add JWT-based bearer token authentication to a REST API
- support device authorization flow for smart TV apps
- secure a Laravel API with OAuth 2.0
- implement PKCE for public clients
- issue and refresh access tokens for third-party clients
When to choose
- you need a spec-compliant OAuth 2.0 authorization server in PHP
- you want to protect your own API with access tokens and refresh tokens
- you need framework-agnostic OAuth via PSR-7
- you need device flow or PKCE support
When to avoid
- you only need an OAuth 2.0 client to consume third-party APIs
- you want a full identity provider with user management, SSO, or OpenID Connect out of the box
- you are not working in PHP
Facets
library · maturity stable
auth api-framework middleware security apis web-development backend php self-hosted oauth2 oauth2-server jwt authorization-server psr-7 bearer-tokens pkce device-flow web-server
5 sources
- readme: https://github.com/thephpleague/oauth2-server · fetched 2026-08-28 · 6630ca8133a8
- homepage: https://oauth2.thephpleague.com · fetched 2026-08-29 · 88b352b455ad
- site_page: https://oauth2.thephpleague.com/installation · fetched 2026-08-29 · a4d4a4d8d615
- site_page: https://oauth2.thephpleague.com/V4-docs · fetched 2026-08-29 · 125301b2fd7a
- site_page: https://oauth2.thephpleague.com/framework-integrations · fetched 2026-08-29 · a4b4510f11ea
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| thephpleague/oauth2-server | main | 87 |
For agents
markdown · JSON · MCP: product_card(name="thephpleague/oauth2-server")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem