bambamboole / laravel-oidc
OpenID Connect suite for Laravel — identity provider (server), relying party (client), and auth UI
Requires
- php: ^8.4
- ext-sodium: *
- bacon/bacon-qr-code: ^3.1
- illuminate/auth: ^13.0
- illuminate/bus: ^13.0
- illuminate/console: ^13.0
- illuminate/contracts: ^13.0
- illuminate/cookie: ^13.0
- illuminate/database: ^13.0
- illuminate/http: ^13.0
- illuminate/queue: ^13.0
- illuminate/session: ^13.0
- illuminate/support: ^13.0
- illuminate/validation: ^13.0
- illuminate/view: ^13.0
- laravel/passkeys: ^0.2.1
- lattice-php/lattice: >=0.77 <1.0
- lcobucci/clock: ^3.2
- lcobucci/jwt: ^5.0
- phpseclib/phpseclib: ^3.0.15
- pragmarx/google2fa: ^9.0
Requires (Dev)
- bambamboole/extended-testbench: ^0.6.1
- larastan/larastan: ^3.0
- laravel/boost: ^2.6
- laravel/pint: ^1.16
- mockery/mockery: ^1.6
- orchestra/testbench: ^11.0
- pestphp/pest: ^5.0
- pestphp/pest-plugin-laravel: ^5.0
- pestphp/pest-plugin-phpstan: ^5.0
- rector/rector: ^2.4
Suggests
None
Provides
None
Conflicts
None
Replaces
- bambamboole/laravel-oidc-client: v0.32.0
- bambamboole/laravel-oidc-server: v0.32.0
- bambamboole/laravel-oidc-ui: v0.32.0
- dev-main
- v0.32.0
- v0.31.0
- v0.30.0
- v0.29.0
- v0.28.0
- v0.27.1
- v0.27.0
- v0.26.0
- v0.25.0
- v0.24.0
- v0.23.0
- v0.22.0
- v0.21.2
- v0.21.1
- v0.21.0
- v0.20.0
- v0.19.0
- v0.18.0
- v0.17.3
- v0.17.2
- v0.17.1
- v0.17.0
- v0.16.0
- v0.15.0
- v0.14.2
- v0.14.1
- v0.14.0
- v0.13.4
- v0.13.3
- v0.13.2
- v0.13.1
- v0.13.0
- v0.12.1
- v0.12.0
- v0.11.0
- v0.10.2
- v0.10.1
- v0.10.0
- v0.9.0
- v0.8.0
- v0.7.0
- v0.6.0
- v0.5.0
- v0.4.0
- v0.3.0
- v0.2.0
- dev-encrypted-client-secrets
- dev-revert-190-realm-column
- dev-realm-column
- dev-fix/mautic-config-and-claims-failure
- dev-refactor/cleanup-pass
- dev-refactor/data-model-cleanup
- dev-feat/audit-type-backed-enum
- dev-feat/audit-event-type
- dev-fix/rp-session-regenerate
- dev-feat/app-integration-seams
- dev-refactor/flatten-config-keys
- dev-fix/domain-realm-urls
- dev-fix/consent-per-resource
- dev-feat/realm-context
- dev-fix/carbon-immutable
- dev-feat/resource-scoped-scopes
- dev-feat/client-principal
- dev-feat/required-actions
- dev-feat/realm-domain-routing
- dev-refactor/keyring-contract
- dev-refactor/database-signing-keys
- dev-refactor/keyring
- dev-feat/resource-audiences
- dev-refactor/drop-phone-address-scopes
- dev-fix/host-app-compat
- dev-refactor/audit-domain-events
- dev-feat/client-scope-assignment
- dev-refactor/server-package-sweep
- dev-feat/password-policy
- dev-feat/logout-confirmation-page
- dev-refactor/server-package-layout
- dev-feat/access-token-context
- dev-chore/pat-client-and-doc-drift
- dev-feat/single-realm-routing
- dev-fix/realm-self-sso-sessions
- dev-chore/comment-and-test-guidelines
- dev-chore/lattice-style-monorepo-setup
- dev-test-cleanup
- dev-protocol-decisions
- dev-naming
- dev-data-model
- dev-chore/pest-5
- dev-client-identity
- dev-own-protocol-core
- dev-sessions-tokens-league
- dev-shared-ports
- dev-domain-boundaries
- dev-league-decoupling
- dev-domain-actions
- dev-realm-contract
- dev-domain-structure
- dev-domain-providers
- dev-auth-domains
- dev-laravel-oidc-keycloak
- dev-realm-scoping
- dev-own-oauth-core
- dev-claims-resolver-context
- dev-keycloak-alternative
- dev-feat/client-admin-api
- dev-feat/mautic-security-hardening
- dev-feat/exchanged-token-scopes
- dev-chore/lattice-0.70
- dev-fix/social-provisioning-errors
- dev-feat/login-social-buttons
- dev-feat/api-token-broker-machine-tokens
- dev-fix/login-page-without-register-route
- dev-feat/mautic-api-token-auth
- dev-feat/mautic-plugin
- dev-fix/reset-password-token-value
- dev-chore/ui-lattice-0.62
- dev-fix/two-factor-ceremony-submit
- dev-chore/lattice-0.57
- dev-feat/two-factor-setup-wizard
- dev-feat/throttle-auth-write-routes
- dev-fix/page-subclassing-and-test-gaps
- dev-feat/api-token-broker-scopes
- dev-feat/audit-logging
- dev-chore/lattice-0.50
- dev-chore/lattice-0.48
- dev-feat/mcp-oauth-discovery
- dev-fix/login-page-overridable-fields
- dev-fix/token-exchange-pipeline-context
- dev-chore/lattice-0.40
- dev-agent/lattice-0.40
- dev-fix/authorize-inertia-redirect
- dev-feat/oidc-auth-guard
- dev-feat/public-client-token-exchange
- dev-fix/inertia-external-redirect-consent
- dev-worktree-signing-key-store
- dev-docs/remove-upgrade-guide
- dev-refactor/audit-cleanup
- dev-feat/multi-provider-mfa-ui
- dev-fix/lattice-constraint-bound
- dev-fix/lattice-0.29
- dev-fix/release-lattice-0.28
- dev-chore/lattice-0.28
- dev-fix/split-concurrency-race
- dev-fix/session-token-guard-default-and-about
- dev-refactor/generic-enrollment-sweep
- dev-chore/tier3-test-infra-dx
- dev-refactor/tier2-architecture
- dev-chore/test-safety-and-ci
- dev-fix/tier1-audit-findings
- dev-refactor/catalog-direct-scope-repository
- dev-docs/cleanup-and-reorg
- dev-feat/passport-under-the-hood
- dev-chore/lattice-0.26
- dev-feat/auth-view-contracts
- dev-chore/l11-docs-and-licenses
- dev-feat/docs-and-split
- dev-feat/ui-package
- dev-feat/monorepo-restructure
- dev-feat/install-self-idempotency-and-token-triggers
- dev-agent/oidc-cleanups
- dev-agent/clean-up-oidc-publishing
- dev-feat/self-sso-install
- dev-feat/composable-installer-primitives
- dev-feat/testing-kit-keyless-boot
- dev-feat/social-login
- dev-feat/oidc-native-keys-and-docs
- dev-feat/fetch-client-docs
This package is auto-updated.
Last update: 2026-09-12 15:47:19 UTC
README
OpenID Connect suite for Laravel, developed as a monorepo.
| Package | Path | Install standalone as |
|---|---|---|
| Master (everything below) | repo root | bambamboole/laravel-oidc |
| Identity provider (server) | packages/server |
bambamboole/laravel-oidc-server |
| Relying party (client) | packages/client |
bambamboole/laravel-oidc-client |
| Auth UI (ui) | packages/ui |
bambamboole/laravel-oidc-ui |
bambamboole/laravel-oidc ships the whole suite and replaces the split
packages. Install the split packages individually if you only need one side
of the protocol.
Development
The repo root is the single Composer project for all Laravel packages: it
autoloads packages/*/src directly and runs the tooling through Orchestra
Testbench (php artisan … boots the Testbench skeleton with the workbench/
app).
composer install # also activates the git hooks in .githooks/ composer check # pint --test + phpstan + rector --dry-run + pest --parallel composer test # pest only composer fix # rector + pint composer boost:refresh # regenerate CLAUDE.md / AGENTS.md from .ai/ and boost.json
packages/mautic is a Symfony bundle with its own install:
composer install:mautic and composer check:mautic.
Docs: https://bambamboole.github.io/laravel-oidc (built from docs/).