Download the PHP package lauroguedes/laravel-sso without Composer

Run your own identity provider. Your people get one account and one sign-in page. Your applications get standard OpenID Connect and never see a password.

Applications connect with any client library. Nothing on the other end has to be Laravel, or PHP.

It is deliberately smaller and easier to read than Keycloak: a Laravel application you can clone, configure, deploy and own completely.

Features

• OAuth 2.0: authorization code with PKCE, refresh tokens, client credentials.
• OpenID Connect: discovery, published key set, ID Tokens, UserInfo, introspection, revocation, RP-initiated logout.
• Applications: registered in the interface, each with its own credentials, redirect URIs and scopes. Secrets hashed, redirect URIs matched exactly.
• Per-application roles: every application defines its own, and its tokens carry the ones its users hold there. One application never learns about another.
• Users: password reset, two-factor authentication, passkeys, email verification.
• Delegation: a Developer role that hands somebody one application without handing them the server.
• Sessions and audit trail: every session and token revocable. Who did what, from where, and when.
• Themeable: brand, palette and layout changed from the interface, or pinned through the environment.

Quick start

Or clone it:

sso:install generates the signing keys, seeds the platform roles, offers to create your first administrator, and prints the endpoints your applications need. It is safe to run again.

Want something to look at? See it running at laravel-sso.lauroguedes.dev, or seed your own copy:

Connecting an application

Register it, then hand its developer the issuer and the credentials:

Most libraries need only the issuer. They read the rest from the discovery document.

Documentation

Full documentation ships with the server and is served from it at /docs: installation, configuration, administration, integration, security and the architecture. Anyone signed in can read it, and on a public demo so can every visitor. Read it online at laravel-sso.lauroguedes.dev/docs.

Tests

Formatting, lint, front-end types, Pint, PHPStan level 7 and the test suite.

Requirements

PHP 8.3+, Node 20.19+ or 22.12+, and SQLite, MySQL, MariaDB or PostgreSQL.

Contributing

Issues and pull requests are welcome. Every change carries a test, and composer ci:check has to pass. See the contributing guide.

Licence

MIT.

If this is useful to you, please star the repository.
It is the thing that helps other people find it.

⭐ Star this project  ·  ☕ Buy me a coffee

_{Crafted by an Artisan ♥ Lauro Guedes}