bambamboole/laravel-oidc

OpenID Connect suite for Laravel — identity provider (server), relying party (client), and auth UI

v0.13.1 2026-08-02 17:04 UTC

Requires

• php: ^8.4
• ext-sodium: *
• bacon/bacon-qr-code: ^3.1
• illuminate/auth: ^12.0 || ^13.0
• illuminate/bus: ^12.0 || ^13.0
• illuminate/console: ^12.0 || ^13.0
• illuminate/contracts: ^12.0 || ^13.0
• illuminate/cookie: ^12.0 || ^13.0
• illuminate/database: ^12.0 || ^13.0
• illuminate/http: ^12.0 || ^13.0
• illuminate/queue: ^12.0 || ^13.0
• illuminate/session: ^12.0 || ^13.0
• illuminate/support: ^12.0 || ^13.0
• illuminate/validation: ^12.0 || ^13.0
• illuminate/view: ^12.0 || ^13.0
• laravel/passkeys: ^0.2.1
• laravel/passport: ^13.4
• lattice-php/lattice: >=0.28 <1.0
• lcobucci/clock: ^3.2
• lcobucci/jwt: ^5.0
• phpseclib/phpseclib: ^3.0.15
• pragmarx/google2fa: ^9.0

Replaces

• bambamboole/laravel-oidc-client: v0.13.1
• bambamboole/laravel-oidc-server: v0.13.1
• bambamboole/laravel-oidc-ui: v0.13.1

MIT

• Manuel Christlieb

• oauth2
• SSO
• laravel
• passport
• oidc
• openid-connect
• relying-party

Published on Packagist.org on 2026-08-02 17:04 UTC

README

OpenID Connect suite for Laravel, developed as a monorepo.

Package	Path	Install standalone as
Master (everything below)	repo root	bambamboole/laravel-oidc
Identity provider (server)	packages/server	bambamboole/laravel-oidc-server
Relying party (client)	packages/client	bambamboole/laravel-oidc-client
Auth UI (ui)	packages/ui	bambamboole/laravel-oidc-ui

bambamboole/laravel-oidc ships the whole suite and replaces the split packages. Install the split packages individually if you only need one side of the protocol.

Development

Each package is a self-contained Composer project. From the repo root:

composer install:all   # composer install in every package
composer check         # pint --test + phpstan + pest, per package

bambamboole/laravel-oidc-server is not on Packagist yet, so the ui install resolves it from the sibling packages/server checkout: install:all backs up packages/ui/composer.json, writes a path repository into it (version taken from .release-please-manifest.json), runs the install, and restores the file — composer.json ends up unchanged, and composer.lock is git-ignored. See packages/ui/composer.local-dev.md for the manual equivalent.

Docs: https://bambamboole.github.io/laravel-oidc (built from docs/).