Download the PHP package eutkin/aadphp without Composer
On this page you can find all versions of the php package eutkin/aadphp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download eutkin/aadphp
More information about eutkin/aadphp
Files in eutkin/aadphp
Package aadphp
Short Description Microsoft Azure Active Directory Authentication Library (AAD) for PHP
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package aadphp
ADAL PHP
This sample contains a PHP libary for accessing Azure Active Directory and a sample app that demonstrates the functionality of that library as well as the new Microsoft School Data Sync API.
Usage
Construct an HttpClient object:
Construct a storage object. A storage object needs to implement the \microsoft\aadphp\OIDC\StorageInterface interface. Currently, two sample implementations are available under microsoft\aadphp\OIDC\StorageProviders namespace - SQLite and Session, but you may need to implement this class yourself based on your storage needs or environment.
Initialize SQLite storage provider (as shown in samples folder):
or initialize the Session storage provider:
Construct the AzureAD client class using the $httpclient and $storage instances.
Set your client ID, client secret, and redirect URI.
You client is now ready to use.
To initiate an authorization request:
To handle an authorization request response (this should be in your redirect URI page):
To perform a resource-owner credentials request:
To get user information from an IDToken, call ->claim() on the $idtoken object. This returns OpenID Connect claims:
Authorization Code Flows
There are 3 authorization code flows one can implement with this library.
1. Authorization code flow:
This is the common 3 legged OAuth2 flow. This will redirect you to the Azure AD login page if you aren't already logged in to Azure AD and take you through the login process. Example: To initate a authorization request call the function $client->authrequest(). The client is set to use this method as default.
This will perform an authorization request by redirecting resource owner's user agent to authentication endpoint. Your request will be processed and response will be served in the redirect uri you have set earlier in config.php. To handle the response call the function $client->handle_auth_response($_REQUEST).
Now, $idtoken has the object of JWT token(you can claim the user information using this token), $tokenparams contain array of token parameters i.e. access_token, refresh_token, $stateparams contain state parameters.
2. Hybrid code flow:
This is the quicker ID Token OAuth2 flow. This will redirect you to the Azure AD login page if you haven't already logged in to Azure AD and take you through the login process. Example: To initate a hybrid flow request set the client to use hybrid flow then call the function $client->authrequest().It will then return you the list of list of IDToken object and stored state parameters.
This will perform an authorization request by redirecting resource owner's user agent to authentication endpoint. Your request will be processed and response will be served in the redirect uri you have set earlier in config.php. To handle the response call the function $client->handle_auth_response($_REQUEST).
Now, $idtoken has the object of JWT token(you can claim the user information using this token), $stateparams contain state parameters.
3. Resource Owner Password Credentials Grant:
This allows you to enter Azure AD login credentials directly in the login form and have authentication happen behind the scenes. You will not be redirected to Azure AD to log in. To perform a resource-owner credentials request:
This will perform an authorization request by sending the user credentials to token endpoint. The response($returned) contain array of token parameters i.e. id_token, access_token, refresh_token.
Samples and Documentation
The samples folder contains a sample implementation of the library demonstrating basic authentication in several different ways.
Community Help and Support
We leverage Stack Overflow to work with the community on supporting Azure Active Directory and its SDKs, including this one! We highly recommend you ask your questions on Stack Overflow (we're all on there!) Also browse existing issues to see if someone has had your question before.
We recommend you use the "adal" tag so we can see it! Here is the latest Q&A on Stack Overflow for AAD: http://stackoverflow.com/questions/tagged/adal
