Download the PHP package xpaw/steam-openid without Composer
On this page you can find all versions of the php package xpaw/steam-openid. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download xpaw/steam-openid
More information about xpaw/steam-openid
Files in xpaw/steam-openid
Package steam-openid
Short Description A correct and simple implementation of OpenID authentication for Steam
License MIT
Homepage https://github.com/xPaw/SteamOpenID.php
Informations about the package steam-openid
Steam OpenID Authentication for PHP

A very minimalistic OpenID implementation that hardcodes it for Steam only, as using a generic OpenID library may do unnecessary steps of “discovering” OpenID servers, which will end up leaking your origin server address, and worse, leave your website open to vulnerabilities of claiming wrong Steam profiles if the implementation is bugged.
The described problems are not theoretical, LightOpenID
has been proven
to have implementation problems, and even if you use validate
and use regex on the final
identity
it can be spoofed and a third-party server can be used to pass the validation.
This library aims to avoid these problems by implementing the bare minimum functionality required for validating Steam OpenID requests against the hardcoded Steam server. This library only implements validation, you will need to implement Steam WebAPI calls yourself to fetch user profile information.
Before using this library, please read Valve's terms here.
Installation
composer require xpaw/steam-openid
See Example.php file for example usage.
Basic usage
If you want to parse SteamIDs, take a look at SteamID.php.
All versions of steam-openid with dependencies
ext-curl Version *