PHP download

Download the PHP package wapplersystems/oauth-service without Composer

On this page you can find all versions of the php package wapplersystems/oauth-service. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download wapplersystems/oauth-service
More information about wapplersystems/oauth-service
Files in wapplersystems/oauth-service

Vendor wapplersystems
Package oauth-service
Short Description Central OAuth2 client and token management for TYPO3 — Authorization Code Flow with PKCE, encrypted token storage, automatic refresh and expiry monitoring
License GPL-2.0-or-later
Homepage https://github.com/WapplerSystems/t3-oauth-service

Keywords Authentication oauth oauth2 extension typo3

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Example code of wapplersystems/oauth-service

Informations about the package oauth-service

OAuth Service for TYPO3

Central OAuth2 client and token management for TYPO3 v14.

Features

Manage multiple OAuth2 clients and connections via a backend module
Authorization Code Flow with PKCE (RFC 7636, OAuth 2.1 compliant)
Encrypted token storage (libsodium, derived from TYPO3 encryption key)
Automatic token refresh via console command / scheduler
Expiry monitoring with configurable email warnings
Extensible provider system — register custom OAuth providers from any extension

Requirements

TYPO3 v14
PHP 8.2+
ext-sodium

Installation

Then update the database schema:

Configuration

Extension settings under Admin Tools > Settings > Extension Configuration > oauth_service:

Setting	Default	Description
`thresholdSeconds`	`300`	Refresh tokens expiring within this many seconds
`debounceMinutes`	`360`	Min. gap between failure notifications per connection
`warningEmail`		Comma-separated emails for expiry warnings
`warningThresholdDays`	`7,3,1`	Days before expiry to send warnings
`debounceHours`	`20`	Min. gap between warning emails per connection

Usage

Backend Module

The module is available at System > OAuth Services (admin only). It lists all configured clients with their connections, token status, and expiry info.

Registering a Provider

Providers are registered via a DI tag — ProviderRegistry's constructor consumes a tagged iterator and populates itself at container build time. This makes registered providers visible in any bootstrap mode, including the TYPO3 Install Tool's failsafe boot (where extension ext_localconf.php files are NOT executed). Use this for any code path the Install Tool might hit, such as the "Test Mail Setup" form when a mail transport depends on OAuth tokens.

Recommended: Configuration/Services.yaml

Equivalent: Configuration/Services.php

Legacy: imperative registration

Older releases registered providers via ext_localconf.php:

This still works — register() is idempotent by identifier, so existing code is not broken by the DI-tag mechanism. However, providers registered only this way are invisible to the Install Tool's failsafe bootstrap, so prefer the DI-tag pattern above.

Retrieving Tokens

Use OAuthClientService to get decrypted access tokens:

Console Commands

Refresh expiring tokens (recommended: every 5 minutes via scheduler):

Monitor connections (recommended: daily):

Security

All tokens and client secrets are encrypted with libsodium (XSalsa20-Poly1305)
CSRF protection via state parameter with SHA-256 hash and 10-minute timeout
PKCE (S256) on every authorization code flow
Token fields are read-only in the backend UI

License

GPL-2.0-or-later

All versions of oauth-service with dependencies

PHP Build Version

Package Version

Version 14.3.1 Release 09. Aug 2026
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of oauth-service from vendor wapplersystems

Requires typo3/cms-core Version ^14
ext-sodium Version *

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package wapplersystems/oauth-service contains the following files

Loading the files please wait ...