marcorombach/laravel-aaf-oidc

OpenID Connect Module for Laravel and AAF IdP

Maintainers

Details

github.com/marcorombach/laravel-aaf-oidc

Homepage

Source

Issues

Installs: 148

Dependents: 0

Suggesters: 0

Security: 0

Stars: 1

Watchers: 1

Forks: 0

Open Issues: 0

v1.3.0 2024-11-15 12:31 UTC

Requires

MIT 6f6293c31b8746690097b2c29b1687c3cd0cdefa

  • Marco Rombach <marco.woop@marcorombach.de>

laravelmarcorombachlaravel-aaf-oidc

This package is auto-updated.

Last update: 2025-01-15 12:58:13 UTC

README

This Laravel Package provides a simple way to authenticate with OpenID Connect. Minimum requirement is a User Model/Table which has either a field 'username' or a field 'email'. It's recommended to define a post login route and a error route. The error route is called with a flashed session variable (session('error')) containing information to display.

To configure this package with NetIQ Advanced Authentication, a Event must be created. The ClientID and Client Secret you get there must be entered in the corresponding field in the configuration file of this package. The provider_url in the config hast to be set like this: https://<aaf-domainname>/osp/a/<tenant>/auth/oauth2 All needed Endpoints will be automatically retrieved from https://<aaf-domainname>/osp/a/<tenant>/auth/oauth2/.well-known/openid-configuration

Installation

Install the package via composer:

composer require marcorombach/laravel-aaf-oidc

You can publish the config file with:

php artisan vendor:publish --tag="aaf-oidc-config"

This is the contents of the published config file:

return [
    'provider_url' => '', //issuer URL of the auth provider -> https://<aaf-domainname>/osp/a/<tenant>/auth/oauth2
    'client_secret' => '', //Client secret
    'client_id' => '', //Client ID
    'post-login-route' => '', //Route to redirect to after login - if not set you will be redirected to the base URL
    'error-route' => '', //Route to redirect to on login error - redirects with $error variable set
];

Usage

$laravelAafOIDC = new Marcorombach\LaravelAafOIDC();
$authenticatable = $laravelAafOIDC->authenticate();

The redirect URI is your applications base URI + /oidc-callback - this has to be set in the AAF Event

It's not necessary to use the class directly. Laravel-AAF-SAML provides a route which starts the authentication process.

/oidc-login

Please note: your application needs to use HTTPS, as it's a requirement of the NetIQ Advanced Authentication Framework.

Requirements

  • PHP 7.4 or greater
  • Laravel 8.0 or greater

Credits