Simple OAuth (OAuth2) & OpenID Connect
This module provides an OAuth 2.0 authorization server for Drupal, allowing secure delegation of access to web services. It is built upon a well-regarded PHP library and implements the OAuth 2.0 framework.
Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC.
Based on League\OAuth2
This module uses the fantastic PHP library OAuth 2.0 Server from The League of Extraordinary Packages. This library has become the de-facto standard for modern PHP applications and is thoroughly tested.
Recommendation
Check the official documentation on the Bearer Token Usage. And turn on SSL!.
End-of-Life Announcement: Simple OAuth 5.2
We want to inform the community that Simple OAuth 5.2 will reach End-of-Life (EOL) on December 9, 2026 (aligned with Drupal 10’s EOL). After this date, 5.2 will no longer receive updates or security fixes.
The upgrade path from 5.2 to 6.0/6.1 is currently unstable. Efforts are underway to stabilize this transition, and the community is encouraged to follow progress or contribute here: #3512143: 5.2.x -> 6.0.0 upgrade error
6.0.x breaking changes
With the 6.0.x we try to be more conform OAuth2 spec and compliant to the OAuth2 best current practices, this involves a few BC’s summarized here below:
- Implicit grant has been removed, see:
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s... - Password Credentials grant has been removed, see:
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s...