elyerr / oauth2-passport-server
A robust and centralized authorization server built with Laravel. It provides secure authentication and authorization for modern applications using both OAuth2 and OpenID Connect protocols
Maintainers
Package info
gitlab.com/elyerr/oauth2-passport-server
Type:project
pkg:composer/elyerr/oauth2-passport-server
Requires
- php: ^8.2.0
- elyerr/api-response: ^v2.0.0
- elyerr/horizon: ^5.1
- elyerr/laravel-runtime: ^1.1
- guzzlehttp/guzzle: ^7.12
- http-interop/http-factory-guzzle: ^1.2
- inertiajs/inertia-laravel: ^3.1
- jeremy379/laravel-openid-connect: ^3.2
- laravel/fortify: ^1.37
- laravel/framework: ^13.0
- laravel/passport: ^13.7
- laravel/scout: ^11.3
- laravel/tinker: ^3.0
- predis/predis: ^3.5
- rap2hpoutre/laravel-log-viewer: ^3.1
- spatie/laravel-fractal: ^6.4
- spatie/laravel-sitemap: ^8.1
- stevebauman/purify: *
- stripe/stripe-php: ^20.2
- symfony/http-client: ^8.1
- symfony/mailgun-mailer: ^8.1
Requires (Dev)
- barryvdh/laravel-debugbar: ^4.3
- fakerphp/faker: ^1.24
- laravel/pint: ^1.29
- laravel/sail: ^1.62
- mockery/mockery: ^1.6
- nunomaduro/collision: ^8.9
- phpunit/phpunit: ^13.2
- spatie/laravel-ignition: ^2.12
This package is auto-updated.
Last update: 2026-07-07 05:27:45 UTC
README
Modular Identity Provider and Access Management Platform
OAuth2 Passport Server is a modern Identity and Access Management (IAM) platform designed to centralize authentication, authorization, and permissions across applications, APIs, microservices, and enterprise systems.
Built on OAuth2, OpenID Connect (OIDC), and Elymod, it provides a centralized Identity Provider (IdP) for managing users, applications, permissions, subscriptions, and services from a single system.
Designed for SaaS platforms, startups, and enterprise architectures, it eliminates fragmented authentication systems while remaining fully compliant with industry standards.
Problem Statement
As systems grow, identity becomes fragmented across:
- Web applications
- Mobile applications
- APIs
- Microservices
- Internal tools
- External integrations
This leads to:
- Duplicate user accounts
- Inconsistent permissions
- High maintenance cost
- Security risks
- Difficult integrations
Solution
OAuth2 Passport Server centralizes identity while separating business logic through a modular architecture.
Identity & Security → Core Platform
Business Features → Modules
The core handles:
- Authentication
- Authorization
- OAuth2 / OpenID Connect
- Identity management
- Access control
Everything else is implemented as independent modules.
Modular Architecture
Plug-and-Play Modules
Modules can be installed, updated, enabled, or removed without modifying the core system.
Each module is fully isolated but integrated with the Identity Provider.
Dependency Isolation
Each module can manage its own:
- Composer dependencies
- Node.js dependencies
- Build pipelines
- Internal architecture
This prevents dependency conflicts across the ecosystem.
Fault Isolation
If a module fails:
Module Failure → Module Disabled → Core Continues Running
Key Features
Identity & Access Management (IAM)
Centralized authentication and authorization across all systems.
OAuth2 Authorization Server
Supports:
- Authorization Code Flow
- PKCE
- Refresh Tokens
OpenID Connect Provider
Includes:
- Discovery endpoint
- JWKS endpoint
- ID tokens
- Standard OIDC flows
Single Sign-On (SSO)
Authenticate once and access multiple applications.
Permission System
Hierarchical scope-based model:
group_service_action
Examples:
billing_invoices_read
billing_payments_manage
crm_contacts_update
support_tickets_close
Benefits:
- Fine-grained control
- Consistent naming
- Easier auditing
- Cross-service compatibility
Service Marketplace
Services can be published and accessed via subscriptions.
When a user subscribes, permissions (scopes) are assigned automatically.
Microservice Ready
Designed for:
- Microservices
- SOA architectures
- API ecosystems
Tokens can be validated via OpenID Connect without direct database access.
OpenID Connect Discovery
Supports automatic discovery via:
/.well-known/openid-configuration
Includes:
- Issuer
- Authorization endpoint
- Token endpoint
- JWKS endpoint
- Supported scopes
- Supported grants
Elymod Ecosystem
OAuth2 Passport Server is built on Elymod, a modular framework for extending functionality without modifying the core system.
Components
- Elymod → module lifecycle management
- Elymod App → standard module structure
- Elyscope → dependency isolation (Composer + PHP-Scoper bridge)
Architecture
OAuth2 Passport Server
↓
Laravel Runtime
↓
Elymod
↓
Elymod App
↓
Elyscope
Security
- OAuth2 compliant
- OpenID Connect compliant
- PKCE support
- JWT (RS256)
- JWKS support
- Centralized authorization
- Scope-based access control
Enterprise Use Cases
- SaaS platforms
- Enterprises
- Government systems
- API platforms
- Multi-service ecosystems
- Customer portals
Vision
A modular identity platform where authentication and authorization act as a stable foundation, while all business features evolve independently through isolated modules.