Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC.

Based on League\OAuth2

This module uses the fantastic PHP library OAuth 2.0 Server from The League of Extraordinary Packages. This library has become the de-facto standard for modern PHP applications and is thoroughly tested.

Supported Branches

To facilitate better quality and security, the maintainers will announce support windows for various versions. All users are encouraged to run 5.2.x. The upgrade path from 8.x-4.x is well documented and supported. PHP 8 is only supported in 5.1.0+.

Recommendation

Check the official documentation on the Bearer Token Usage. And turn on SSL!.

6.0.x breaking changes

With the 6.0.x we try to be more conform OAuth2 spec and compliant to the OAuth2 best current practices, this involves a few BC’s summarized here below:

Implicit grant has been removed, see:
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s...
Password Credentials grant has been removed, see:
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s...

Sponsorship

If you find this module helpful, or profit from its use, please consider sponsoring a maintainer to ensure ongoing care for this module.

Brad Jones (bradjones1) - Sponsor on GitHub
Mateu Aguiló Bosch (e0ipso) - Sponsor on GitHub

Automated Testing

This project is part of the early-access program for Drupal's migration to GitLab. The test suite is a little brittle, but currently runs with GitLab CI.

RTBC issues for Simple OAuth (OAuth2) & OpenID Connect

Filters