FOSOAuthServerBundle icon indicating copy to clipboard operation
FOSOAuthServerBundle copied to clipboard

Published 20 hours ago • verified publisher icon FriendsOfSymfony

Does it support openid connect specifications ?

Open vishalmelmatti opened this issue 10 years ago • 11 comments

http://openid.net/connect/

vishalmelmatti avatar Jul 30 '14 17:07 vishalmelmatti

I don't think it currently supports OpenID Connect, but I'd like to see it though...

relaxnow avatar Aug 12 '14 09:08 relaxnow

I confirm that this bundle does not support OpenID Connect. OpenID Connect uses OAuth2 with JWT assertion and profiles. JWT assertion and profiles are not supported by this bundle yet (and I am not sure they will be supported soon).

As far as I know, there is no mature PHP libraries that are compliant with JWT/JWS/JWE/JWK/JWA specifications (wich are still drafts). The best library I have found is Namshi/JOSE, but this library has a lot of missing features (especially, JWK are not really supported).

Spomky avatar Aug 12 '14 11:08 Spomky

Dear All,

Just after my answer, I have decided to create a new PHP library to support JOSE. There are still a lot of works to do, especially to improve code design and bugs (detected by Scrutinizer) to fix, but it is quite stable and there are a lot of supported algorithms (including Elliptic Curves).

If anybody want to try my library and implement a support for OpenID Connect, you will find information at Spomky-Labs/JOSE

Spomky avatar Aug 22 '14 13:08 Spomky

@Spomky doesn't this library support all openid connect specifications ? https://github.com/bshaffer/oauth2-server-php

vishalmelmatti avatar Nov 06 '14 08:11 vishalmelmatti

@vishalmelmatti not it does not. It only supports JWS used as bearer tokens

Edit: since september, it seems that this library supports OIDC.

Spomky avatar Nov 25 '14 13:11 Spomky

HI @vishalmelmatti , @Spomky , @relaxnow

Does any of you know a bundle for Symfony 2.6 which covers OpenID Connect + OAuth2?

Or, After a year since last comment in here, which solution did you go through?

Thank you

antonioberben avatar Jun 18 '15 21:06 antonioberben

@nennete I hacked https://github.com/bshaffer/oauth2-server-php at the time but I only needed a Proof Of Concept.

relaxnow avatar Jun 24 '15 13:06 relaxnow

Hey @relaxnow,

would you maybe show your solution if you have one? Thanks.

Best regards Kristina

xrowkristina avatar Jan 15 '16 16:01 xrowkristina

@xrowkristina I'm afraid I no longer have access to that code base.

relaxnow avatar Jan 21 '16 13:01 relaxnow

@relaxnow: What a pity... Thank you for the anwser.

xrowkristina avatar Jan 21 '16 13:01 xrowkristina

Out of the box it doesn't. I'm currently evaluation a possibility of implementation.

cored0wn avatar Feb 09 '18 12:02 cored0wn