Download the PHP package egroupware/openid without Composer

On this page you can find all versions of the php package egroupware/openid. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package openid

OpenID Connect and OAuth2 server for EGroupware

2026 rewrite against current upstream releases

This app used to vendor its own, long-outdated copies of league/oauth2-server (7.4.0), steverhoades/oauth2-openid-connect-server (1.3.0), lcobucci/jwt (3.4.6) and slim/slim (3.13.0, EOL) in its own vendor/ directory, with several upstream classes copy-pasted into EGroupware\OpenID\* and patched just to keep running on PHP 8.

It has now been rewritten on top of current upstream releases (league/oauth2-server ^9.4, steverhoades/oauth2-openid-connect-server ^3.0.1, lcobucci/jwt ^5.6, slim/slim ^4.15), reusing the existing DB-backed storage layer (Repositories/Entities) unchanged wherever the new interfaces allow it. The app's own vendor/ directory is gone; it now shares EGroupware's main vendor/ tree like every other app, which also fixed a real bug (see below).

Supported endpoints and token issuer

Supported Grants:

Client configuration in EGroupware

Go to: Admin > Applications > OpenID / OAuth2 server > Clients

More useful resources

Open tasks:

Installation

  1. EGroupware master and 19.1 install this app by default: composer install or install-cli.php
  2. Install openid app via EGroupware setup

Testing available grants

A grant is a method of acquiring an access token. Deciding which grants to use depends on the type of client the end user will be using, and the experience you want for your users.

https://oauth2.thephpleague.com/authorization-server/which-grant/

All examples require to create a client under Admin >> OpenID / OAuth2 server >> Clients with ALL grants first:

The following test assume your EGroupware installation is reachable under http://example.com/egroupware/

Testing the client credentials grant

Send the following cURL request:

Testing the password grant

Send the following cURL request (replacing <username>/<password> with one valid for your EGroupware!):

Testing the implicit grant

Here we use the OpenID Connect Debugger site, so head to https://oidcdebugger.com and add the following data:

Hit [Send request] and you will be redirected to your EGroupware, have to log in, if you not already are, and authorize the request. After that you will be redirected back to the OpenID Connect debuger, which will show if it was successful and in that case the access-token. It should also generate a row in egw_openid_access_token and egw_open_id_access_token_scopes table.

Testing the authorization code grant

Here we use again the OpenID Connect Debugger site for the first step, so head to https://oidcdebugger.com and change the URI and Response code as below:

Hit [Send request] and you will be redirected to your EGroupware, have to log in, if you not already are, and authorize the request. After that you will be redirected back to the OpenID Connect debuger, which will show if it was successful and in that case and temporary auth-code which now needs to be exchanged in a 2. step into an access- and a refresh-token.

All 3 tokens and in case of the access-token also the scopes are now also in the egwopenid(auth_codes|access_tokens|access_token_scopes|refresh_tokens) tables.

Testing /userinfo endpoint

You need a valid access_token, which you can get eg. with an implicit grant (see above), using scopes: openid profile email phone address

curl -i "http://example.org/egroupware/openid/endpoint.php/introspect" \ -H "Accept: application/json" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Authorization: Basic b2lkY2RlYnVnZ2VyLmNvbTpzZWNyZXQ=" \ --data-urlencode "token=" --data-urlencode "token_type_hint=access_token" HTTP/1.1 200 OK Date: Sun, 07 Apr 2019 09:17:44 GMT Server: Apache/2.4.38 (Unix) OpenSSL/1.0.2r PHP/7.3.3 X-Powered-By: PHP/7.3.3 pragma: no-cache cache-control: no-store Content-Length: 236 Content-Type: application/json; charset=UTF-8

{"active":true,"token_type":"access_token","scope":["openid","profile"],"client_id":"oidcdebugger.com","exp":1554629779,"iat":1554626179,"sub":"2","jti":"2ab5f9fe5f4cfe0eeb49491e4cc9a313b2fb11f74969d52b8bd60ba8ec9894ae7f1c9eee697e74f2"}

All versions of openid with dependencies

PHP Build Version
Package Version
Requires slim/slim Version ^4.15
steverhoades/oauth2-openid-connect-server Version ^3.0.1
monolog/monolog Version ^3.0
league/oauth2-server Version ^9.4
league/event Version ^3.0
lcobucci/jwt Version ^5.6
lcobucci/clock Version ^3.2
psr/http-message Version ^2.0
defuse/php-encryption Version ^2.4
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package egroupware/openid contains the following files

Loading the files please wait ...