README

This repository is a read-only split of aetah/php-openid-toolkit.

• Development happens in the monorepo.
• Feature PRs and issues should be opened against aetah/php-openid-toolkit.
• This split repository is published from the monorepo and should not be treated as the source of truth.

OIDC Discovery

Generic PHP library for OpenID Connect Discovery 1.0 processing primitives.

Scope

This package is designed as a reusable base for aetah/* libraries and CMS integrations. It provides:

• Issuer normalization and validation helpers.
• Well-known provider configuration URL construction.
• Provider metadata parsing and structural validation.
• WebFinger request URL construction and issuer extraction.
• Discovery resolution helpers with pluggable document loading.

The package intentionally leaves HTTP client behavior, TLS policy hardening, caching, retries, and cryptographic signature verification of fetched metadata to host applications.

Install

composer require aetah/oidc-discovery

Quick Start

<?php

declare(strict_types=1);

use Aetah\OIDCDiscovery\OIDCDiscovery;

$discovery = new OIDCDiscovery();
$url = $discovery->buildProviderConfigurationUrl('https://op.example/');

Spec

OpenID Connect Discovery 1.0: https://openid.net/specs/openid-connect-discovery-1_0.html

Spec Status

Missing/currently out of scope:

• HTTP client behavior, including TLS policy hardening, retries, and caching of discovery or WebFinger documents.
• Cryptographic signature verification or trust validation for fetched metadata documents.
• Full OP metadata policy enforcement beyond current structural parsing and validation helpers.
• End-to-end runtime orchestration for network retrieval and error handling beyond the pluggable document-loader abstraction.

Quality Checks

Run Static Analysis

composer analyse

Run Tests

composer test

Generated artifacts are written under build/:

• build/phpunit/ for JUnit reports
• build/coverage/ for coverage output

Clean Build Artifacts

composer clean

Run Test Coverage

composer test:coverage

Run Style Checks

composer lint

Fix Style Checks

composer lint:fix

License

Licensed under AGPL-3.0-or-later. See LICENSE for details.