OAuth Provider

OAuth Provider is a reusable Drupal foundation module that enables secure OAuth authentication for external services such as Microsoft 365 and Google. It provides configurable OAuth applications, secure credential storage, and user-specific token management for custom integrations and automation.

Features

OAuth Provider provides a common authentication framework that can be reused by other modules and custom integrations.

Features include:

• Support for Microsoft 365 and Google OAuth providers.
• Reusable OAuth application configuration.
• Delegated user authentication flows.
• Microsoft client credentials authentication for service-to-service integrations.
• Secure storage of client secrets through the Key module.
• User-specific access token management.
• Extensible architecture for additional OAuth providers.
• Developer-friendly APIs for consuming modules.

Typical use cases include:

• Accessing Microsoft Graph APIs.
• Reading or processing Microsoft 365 mailboxes.
• Authenticating users against external APIs.
• Connecting Drupal to Google services.
• Azure automation and service integrations.
• Providing shared OAuth functionality for custom Drupal modules.

Post-Installation

After installing and enabling the module:

1. Install and configure the Key module.
2. Create a key to securely store your OAuth client secret.
3. Create an OAuth application configuration within Drupal.
4. Select the provider (Microsoft 365 or Google).
5. Configure the client ID, secret key reference, redirect URI, and required scopes.
6. Authorize users or obtain application credentials as required by your integration.

The module does not create content types or alter editorial workflows. Instead, it provides OAuth configuration entities and services that can be used directly by administrators, developers, or dependent modules.

Additional Requirements

Required:

• Drupal 11
• Key module
• An OAuth application registered with the chosen provider

Depending on your use case, you may also need:

• A Microsoft Entra ID (Azure AD) application registration
• A Google Cloud OAuth application
• Appropriate API permissions and scopes

Recommended Modules/Libraries

OAuth Provider is designed to act as a foundation for integration modules.

Recommended companion modules include:

• Key module for secure credential storage.
• Custom Microsoft Graph integrations.
• Mailbox processing modules.
• Azure Service Bus integrations.
• Any custom module requiring outbound OAuth authentication.

Similar Projects

Several Drupal projects provide OAuth-related functionality, but typically focus on authentication and Single Sign-On.

• OpenID Connect focuses on user login and identity federation.
• Simple OAuth provides OAuth server capabilities for Drupal.

OAuth Provider focuses on a different problem: securely obtaining and managing access tokens so Drupal can authenticate to external APIs and cloud services.

Supporting this Module

Issues, feature requests, bug reports, and pull requests are welcome through the Drupal.org issue queue.

Community feedback and real-world testing help improve the module and ensure compatibility with a growing range of OAuth providers and integration scenarios.

Community Documentation

Documentation currently includes:

• Installation and configuration guidance in the project README.
• Provider configuration examples.
• Developer integration examples for consuming OAuth services.

Additional tutorials, walkthrough videos, and example integrations will be added as the project evolves.

Architecture

OAuth Provider is intended to be used as a shared authentication layer for Drupal integrations. Rather than each module implementing its own OAuth handling, consuming modules can rely on OAuth Provider to manage application registration details, credentials, token acquisition, token storage, and provider-specific authentication logic.