Download the PHP package rafalmasiarek/dashboard-kit-addon-sso without Composer
On this page you can find all versions of the php package rafalmasiarek/dashboard-kit-addon-sso. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download rafalmasiarek/dashboard-kit-addon-sso
More information about rafalmasiarek/dashboard-kit-addon-sso
Files in rafalmasiarek/dashboard-kit-addon-sso
Package dashboard-kit-addon-sso
Short Description OAuth2/OIDC SSO plugin for dashboard-kit — Authorization Code + PKCE, RS256 JWT, JWKS
License BUSL-1.1
Informations about the package dashboard-kit-addon-sso
dashboard-kit-addon-sso
OAuth2/OIDC SSO addon for rafalmasiarek/dashboard-kit.
Implements the Authorization Code flow with PKCE and RS256-signed JWTs. Exposes standard OpenID Connect protocol endpoints and an admin UI for managing OAuth2 clients.
Requirements
- PHP 8.2+
rafalmasiarek/dashboard-kit: *firebase/php-jwt: ^6.0
Installation
Quick start
An RSA private key is generated automatically at {storage_dir}/private.pem on first boot.
Configuration
| Key | Default | Description |
|---|---|---|
issuer |
— | Required. Base URL of the authorization server, no trailing slash |
access_ttl |
3600 |
Access token lifetime in seconds |
refresh_ttl |
2592000 |
Refresh token lifetime in seconds (30 days) |
storage_dir |
{app.root_dir}/storage |
Directory for private.pem |
Config can be passed as the third argument to register() or via app.config['sso'] in Dashboard::create().
Protocol endpoints
| Endpoint | Method | Description |
|---|---|---|
/.well-known/openid-configuration |
GET | OpenID Connect discovery document |
/oauth/jwks.json |
GET | Public RSA key set (JWKS) |
/oauth/authorize |
GET | Authorization endpoint — redirects to login, then back to client |
/oauth/token |
POST | Token endpoint — exchanges code for access/refresh tokens |
/oauth/userinfo |
GET | Returns claims for the authenticated user |
/oauth/revoke |
POST | Revokes an access or refresh token |
Admin UI
Accessible at {adminPrefix}/sso/clients. Requires admin role.
- List, create, and delete OAuth2 clients
- Each client has a
client_id, optionalclient_secret, and one or more redirect URIs
Database
All tables are created automatically (CREATE TABLE IF NOT EXISTS) on first register() call:
sso_clientssso_auth_codessso_access_tokenssso_refresh_tokens
Token verification (resource server)
Tokens are RS256-signed JWTs. Verify them using the public key from /oauth/jwks.json and any standard JWT library:
License
Business Source License 1.1 — see LICENSE. For alternative licensing, contact us.