Download the PHP package danielburger1337/oauth2-dpop without Composer
On this page you can find all versions of the php package danielburger1337/oauth2-dpop. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download danielburger1337/oauth2-dpop
More information about danielburger1337/oauth2-dpop
Files in danielburger1337/oauth2-dpop
Package oauth2-dpop
Short Description Create/Verify OAuth2 DPoP tokens.
License MIT
Homepage https://github.com/danielburger1337/oauth2-dpop-php
Informations about the package oauth2-dpop
danielburger1337/oauth2-dpop
A PHP library that helps you both create and verify OAuth2 DPoP proof tokens.
Demonstrating Proof of Possession (DPoP) is an application-level mechanism for sender-constraining OAuth [RFC6749] access and refresh tokens. It enables a client to prove the possession of a public/private key pair by including a DPoP header in an HTTP request. The value of the header is a JSON Web Token (JWT) [RFC7519] that enables the authorization server to bind issued tokens to the public part of a client's key pair. Recipients of such tokens are then able to verify the binding of the token to the key pair that the client has demonstrated that it holds via the DPoP header, thereby providing some assurance that the client presenting the token also possesses the private key. In other words, the legitimate presenter of the token is constrained to be the sender that holds and proves possession of the private part of the key pair.
~ Section 1 of RFC-9449
Install
This library is PSR-4 compatible and can be installed via PHP's dependency manager Composer.
Documentation
You can find the documentation here.
Running Tests Locally
This library is fully unit tested. It also uses strict static analysis to minimize the possibility of unexpected runtime errors.
License
This software is available under the MIT license.