yii2-oauth2 | OAuth2 wrapper for Yii2 applications | OAuth library

by pgaultier PHP Version: Current License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | yii2-oauth2 Summary

yii2-oauth2 is a PHP library typically used in Security, OAuth, Composer applications. yii2-oauth2 has no bugs, it has no vulnerabilities and it has low support. However yii2-oauth2 has a Non-SPDX License. You can download it from GitHub.

This extension allow the developper to use [Oauth2] server.

Support

Quality

Security

License

Reuse

Support

yii2-oauth2 has a low active ecosystem.

It has 59 star(s) with 18 fork(s). There are 9 watchers for this library.

It had no major release in the last 6 months.

There are 0 open issues and 6 have been closed. On average issues are closed in 58 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of yii2-oauth2 is current.

Quality

yii2-oauth2 has no bugs reported.

Security

yii2-oauth2 has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

yii2-oauth2 has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

yii2-oauth2 releases are not available. You will need to build from source code and install.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi has reviewed yii2-oauth2 and discovered the below as its top functions. This is intended to give you an instant insight into yii2-oauth2 implemented functionality, and help decide if they suit your requirements.

Migrate Access Tokens
Shows the authorization page .
Updates an auth code .
Insert an access token
Registers the OAuth2 server .
Sets up the DI .
Convert a value to a model attribute .
Updates a cypher key .
Checks if the user can perform the given permission
Convert the OAuth2 response to an OAuth2 response .

Get all kandi verified functions for this library.

yii2-oauth2 Key Features

No Key Features are available at this moment for yii2-oauth2.

yii2-oauth2 Examples and Code Snippets

No Code Snippets are available at this moment for yii2-oauth2.

Community Discussions

Trending Discussions on yii2-oauth2

how to replace subject(sub) to a secret string in id_token at the openid connect?

QUESTION

how to replace subject(sub) to a secret string in id_token at the openid connect?

Asked 2018-Jan-02 at 11:04

oauth2 library:

https://github.com/Filsh/yii2-oauth2-server

https://github.com/bshaffer/oauth2-server-php

please notice that, user id in my system is a integer not a string.

my purpose just hide system user id.

the steps for id token :

http://bshaffer.github.io/oauth2-server-php-docs/overview/openid-connect/

{ "iss": "localhost", "sub": 2, "aud": "-7IloKCawcvBwRijJeo7nsLxx1chC68L", "iat": 1514518157, "exp": 1514521757, "auth_time": 1514518157, "nonce": "dfsdsdsd" }

md5('-7IloKCawcvBwRijJeo7nsLxx1chC68L' + 2) = 3C86CBBFF35AD3B6E609F5622D776531

i wanna replace subject to md5(client_id + subject)

{ "iss": "localhost", "sub": "3C86CBBFF35AD3B6E609F5622D776531", "aud": "-7IloKCawcvBwRijJeo7nsLxx1chC68L", "iat": 1514516044, "exp": 1514519644, "auth_time": 1514516044, "nonce": "dfsdsdsd" }

...

ANSWER

Answered 2018-Jan-02 at 11:04

IF I understand your desire, the OpenID Provider can provide anything for the Subject as long as it is Unique at that OpenID Provider for a specific relying party.

OpenID Connect Identity Token Sub is a Subject Identifier is a locally unique and never re-assigned identifier within the Issuer for the Authenticated Entity, which is intended to be consumed by the OAuth Client.

Two Subject Identifier types (subject_types_supported) are defined by OpenID Connect and are Required to be present in the OpenID Provider Metadata:

public - provides the same sub (subject) value to all OAuth Client. It is the default if the provider has no subject_types_supported element in its discovery document.

pairwise - provides a different Sub value to each OAuth Client, so as not to enable OAuth Client to correlate the End-User's activities without permission.

The OpenID Connect Provider's OpenID Connect Discovery document SHOULD list its supported Subject Identifier types in the subject_types_supported element.

If there is more than one type listed in the array, the OAuth Client MAY elect to provide its preferred identifier type using the subject_type parameter during Registration.

Sub MUST NOT exceed 255 ASCII characters in length.

Sub Sub value is a Case-sensitive string.

Source https://stackoverflow.com/questions/48017114

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install yii2-oauth2

If you use Packagist for installing packages, then you can update your composer.json like this :.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: