Laravel 12 – 13
PHP 8.4+
The project is in a healthy, maintained state
OpenID Connect suite for Laravel — identity provider (server), relying party (client), and auth UI
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
 Dependencies

Runtime

bacon/bacon-qr-code
^3.1
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
^12.0 || ^13.0
lattice-php/lattice
>=0.70 <1.0
lcobucci/clock
^3.2
phpseclib/phpseclib
^3.0.15
 Project Readme

laravel-oidc

OpenID Connect suite for Laravel, developed as a monorepo.

Package Path Install standalone as
Master (everything below) repo root bambamboole/laravel-oidc
Identity provider (server) packages/server bambamboole/laravel-oidc-server
Relying party (client) packages/client bambamboole/laravel-oidc-client
Auth UI (ui) packages/ui bambamboole/laravel-oidc-ui

bambamboole/laravel-oidc ships the whole suite and replaces the split packages. Install the split packages individually if you only need one side of the protocol.

Development

Each package is a self-contained Composer project. From the repo root:

composer install:all   # composer install in every package
composer check         # pint --test + phpstan + pest, per package

bambamboole/laravel-oidc-server is not on Packagist yet, so the ui install resolves it from the sibling packages/server checkout: install:all backs up packages/ui/composer.json, writes a path repository into it (version taken from .release-please-manifest.json), runs the install, and restores the file — composer.json ends up unchanged, and composer.lock is git-ignored. See packages/ui/composer.local-dev.md for the manual equivalent.

Docs: https://bambamboole.github.io/laravel-oidc (built from docs/).