Simple OAuth (OAuth2) & OpenID Connect

Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC.

Based on League\OAuth2

This module uses the fantastic PHP library OAuth 2.0 Server from The League of Extraordinary Packages. This library has become the de-facto standard for modern PHP applications and is thoroughly tested.

Recommendation

Check the official documentation on the Bearer Token Usage. And turn on SSL!.

End-of-Life Announcement: Simple OAuth 5.2

We want to inform the community that Simple OAuth 5.2 will reach End-of-Life (EOL) on December 9, 2026 (aligned with Drupal 10’s EOL). After this date, 5.2 will no longer receive updates or security fixes.

The upgrade path from 5.2 to 6.0/6.1 is currently unstable. Efforts are underway to stabilize this transition, and the community is encouraged to follow progress or contribute here: #3512143: 5.2.x -> 6.0.0 upgrade error

6.0.x breaking changes

With the 6.0.x we try to be more conform OAuth2 spec and compliant to the OAuth2 best current practices, this involves a few BC’s summarized here below:

• Implicit grant has been removed, see:
  https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s...
• Password Credentials grant has been removed, see:
  https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s...