Download the PHP package aetah/oidc-core without Composer
On this page you can find all versions of the php package aetah/oidc-core. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download aetah/oidc-core
More information about aetah/oidc-core
Files in aetah/oidc-core
Package oidc-core
Short Description Generic PHP library implementing OpenID Connect Core 1.0 processing helpers
License AGPL-3.0-or-later
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package oidc-core
Read-Only Split Notice
This repository is a read-only split of aetah/php-openid-toolkit.
- Development happens in the monorepo.
- Feature PRs and issues should be opened against
aetah/php-openid-toolkit. - This split repository is published from the monorepo and should not be treated as the source of truth.
OIDC Core
Generic PHP library for OpenID Connect Core 1.0 protocol processing primitives.
Scope
This package is designed as a reusable base for aetah/* libraries and CMS
integrations. It provides:
- Authorization Request parsing and structural/protocol validation.
- ID Token compact JWT parsing and claim validation helpers.
- UserInfo response subject consistency validation.
The package intentionally leaves cryptographic JWS signature verification, key retrieval, discovery retrieval, and HTTP transport orchestration to host applications.
Install
Quick Start
Spec
OpenID Connect Core 1.0: https://openid.net/specs/openid-connect-core-1_0.html
Spec Status
Missing/currently out of scope:
- Cryptographic JWS signature verification for ID Tokens and any associated key retrieval/trust validation.
- Discovery retrieval and dynamic metadata resolution needed to obtain issuer keys or endpoint configuration.
- HTTP transport and end-to-end protocol orchestration for authorization, token, UserInfo, and related runtime flows.
- Full coverage of optional and advanced Core features beyond the current authorization-request, ID-Token-claim, and UserInfo-subject validation helpers.
Quality Checks
Run Static Analysis
Run Tests
Run Benchmarks
The benchmark suite in bench/ is intentionally separate from PHPUnit. It
focuses on parser and validator hot paths with deterministic small, medium, and
large fixtures so regressions can be tracked without turning CI timing noise
into normal test failures.
Generated artifacts are written under build/:
build/phpunit/for JUnit reportsbuild/coverage/for coverage outputbuild/phpbench/for benchmark dumps and comparison logs
Clean Build Artifacts
Benchmark Baseline
The benchmark CI job compares the current run against ci/phpbench-baseline.xml
when that file is present.
-
Refresh the baseline with:
- CI threshold variables:
PHPBENCH_TIME_REGRESSION_THRESHOLDdefaults to25PHPBENCH_MEMORY_REGRESSION_THRESHOLDdefaults to20PHPBENCH_ENFORCE_BASELINE=1turns threshold overruns into job failures
Run Test Coverage
Run Style Checks
Fix Style Checks
License
Licensed under AGPL-3.0-or-later. See LICENSE for details.
All versions of oidc-core with dependencies
ext-json Version *