PHP download

Download the PHP package bambamboole/laravel-oidc-server without Composer

On this page you can find all versions of the php package bambamboole/laravel-oidc-server. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download bambamboole/laravel-oidc-server
More information about bambamboole/laravel-oidc-server
Files in bambamboole/laravel-oidc-server

Vendor bambamboole
Package laravel-oidc-server
Short Description OpenID Connect provider (server) for Laravel — the engine behind bambamboole/laravel-oidc
License MIT
Homepage https://github.com/bambamboole/laravel-oidc-server

Keywords oauth2 laravel oidc oauth2-server openid-connect

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Informations about the package laravel-oidc-server

laravel-oidc-server

An OIDC-capable auth server built as a Laravel package — turn your Laravel app into a full OpenID Connect identity provider that other applications authenticate their users against.

This is the server package of the laravel-oidc monorepo. Its siblings are bambamboole/laravel-oidc-client (the relying party) and bambamboole/laravel-oidc-ui (the Lattice auth UI); bambamboole/laravel-oidc ships all three.

The package provides the complete protocol surface of an identity provider and, optionally, a complete authentication engine (login, registration, MFA) that your app fills with its own views and actions.

📖 Read the documentation →

What you get

OIDC provider

Signed RS256 id_tokens, a /.well-known/openid-configuration discovery document, and a JWKS endpoint (RFC 7638 kids).
userinfo, RP-initiated logout, OIDC back-channel logout, RFC 7662 introspection, and RFC 7009 revocation.
RFC 9068 structured at+jwt access tokens.
RFC 8693 token exchange, with a self-contained CheckAudience resource-server middleware.
Capability-scoped token triggers and a swappable ClaimsResolver / ScopeRepository / ExchangePolicy.
Env-based signing keys (OIDC_PRIVATE_KEY / OIDC_PUBLIC_KEY) with a built-in rotation command.

Auth engine (optional)

Package-owned login, registration, password reset, email verification, and password confirmation, driven by view and action seams your app fills.
Multi-factor authentication: TOTP, recovery codes, and passkeys (WebAuthn).
A post-login pipeline with a single decision hook (requireMfa / deny / add claims) and acr / amr emission.

Requirements

PHP ^8.4
Laravel 12 or 13
laravel/passport ^13.4 — the OAuth2 core the package builds on

Installation

Install the server package on its own, or the full suite (server + client + ui) via composer require bambamboole/laravel-oidc:

The service provider is auto-discovered. Set OIDC_ISSUER to your provider's public origin — every URL advertised in discovery is derived from it.

See the Installation guide for the full walkthrough, and Configuration for every config/oidc.php key.

Built on Passport

Under the hood, the OAuth2 core is Laravel Passport 13 — the package extends and reconfigures it rather than reimplementing an authorization server. On registration it calls Passport::ignoreRoutes() and registers the full /oauth/* route surface itself, so that:

OIDC scopes, max_age, and the id_token response type are wired in.
PKCE is required on every authorization request (OAuth 2.1 §4.1.1/§7.6), for confidential clients too.
Passport's optional JSON API management routes are not registered — register them yourself if you need them.
The access-token entity is swapped to OidcAccessToken and the response type to IdTokenResponse.

Documentation

The full documentation lives at bambamboole.github.io/laravel-oidc. It is built with Starlight from the docs/ directory of the monorepo, where npm run docs:dev serves it locally.

Testing

CI runs the suite across Laravel 12/13 on every push and pull request.

Changelog

All packages in the suite are versioned in lockstep; see the monorepo changelog.

License

MIT. See LICENSE.

All versions of laravel-oidc-server with dependencies

PHP Build Version

Package Version

Version v0.23.0 Release 10. Sep 2026
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of laravel-oidc-server from vendor bambamboole

Requires php Version ^8.4
ext-sodium Version *
bacon/bacon-qr-code Version ^3.1
illuminate/auth Version ^13.0
illuminate/bus Version ^13.0
illuminate/console Version ^13.0
illuminate/contracts Version ^13.0
illuminate/cookie Version ^13.0
illuminate/database Version ^13.0
illuminate/http Version ^13.0
illuminate/queue Version ^13.0
illuminate/session Version ^13.0
illuminate/support Version ^13.0
illuminate/validation Version ^13.0
illuminate/view Version ^13.0
laravel/passkeys Version ^0.2.1
lcobucci/clock Version ^3.2
lcobucci/jwt Version ^5.0
phpseclib/phpseclib Version ^3.0.15
pragmarx/google2fa Version ^9.0

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package bambamboole/laravel-oidc-server contains the following files

Loading the files please wait ...