league/oauth2-server-bundle
Symfony bundle .
v1.2.2
5.7M downloads/mo
#1692 most downloaded on Packagist
thephpleague/oauth2-server-bundle
What this package is like to depend on
Last release 28 days ago
26 Jul 2026
Release timing varies
gaps range from 8 days to 8 months
Some releases are documented
notes for 10 of 20 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
20 releases · first in 2021
5 releases in the last 12 months
see the full history below
Release timeline
20 releases · Sep 2021 to Jul 2026Releases
latest 20-
v1.2.226 Jul 2026Release notes
Open source →Full Changelog: v1.2.1...v1.2.2
What's Changed
- Fix BC break: avoid device code revocation if not enabled by @ajgarlag in #298
- Skip deprecated service references when unnecessary by @ajgarlag in #299
- Document how to reduce secret hashing cost by @chalasr in #302
Full Changelog: v1.2.1...v1.2.2
-
v1.2.122 Jul 2026Release notes
Open source →What's Changed
- Fix rector required version by @ajgarlag in #292
- Fix BC break: make device code grant opt-in by @chalasr in #295
- Fix BC break: revert secret field length by @ajgarlag in #297
Full Changelog: v1.2.0...v1.2.1
-
v1.2.017 Jul 2026Release notes
Open source →What's Changed
- feat: Add support for device code grant by @SimonVanacco in #229
- Fix CS by @ajgarlag in #275
- Update GitHub Actions by @ajgarlag in #276
- Fix usage of virtual method
ClientInterface::getNameby @ajgarlag in #274 - Add upgrade guide by @ajgarlag in #281
- Deprecate not setting
enable_password_grantandenable_implicit_grantby @ajgarlag in #279 - Update upgrade guide by @ajgarlag in #282
- Fix grant restriction for public clients on League OAuth2 Server v9 by @JorisMarnasBO in #280
- Fix compatibility with
league/oauth2-server: 9.4.0by @ajgarlag in #284 - Allow setting extra claims to the access token by @ajgarlag in #272
- ci: Introduce a meta job for the tests by @theofidry in #166
- Update Symfony supported versions by @ajgarlag in #277
- Fix order of converting user by @RobertMe in #147
- Fix BC break by @ajgarlag in #285
- store client-secret as hash only by @ajgarlag and @Thomblin in #283
- fix: #225: GrantConfigurator should accept League\OAuth2\Server\Grant… by @TLG-Gildas in #227
- Fix upgrade guide by @ajgarlag in #288
- Prevent call to undefined method
setSecretwhen rehashing client secrets by @ajgarlag in #289 - Refactor test kernel configuration by @ajgarlag in #286
- Codebase modernization by @ajgarlag in #290
New Contributors
- @SimonVanacco made their first contribution in #229
- @JorisMarnasBO made their first contribution in #280
- @Thomblin made their first contribution in #283
- @TLG-Gildas made their first contribution in #227
Full Changelog: v1.1.1...v1.2.0
-
v1.1.106 Feb 2026Release notes
Open source →What's Changed
- Update the cron schedule for GitHub workflows by @ajgarlag in #266
- Modify the test for doctrine bundle availability by @ajgarlag in #269
- Fix CS by @ajgarlag in #271
Full Changelog: v1.1.0...v1.1.1
-
v1.1.011 Dec 2025Release notes
Open source →What's Changed
- fix: Test for availability of doctrine in bundle configuration by @frankdekker in #246
- Fix Coding Standards by @ajgarlag in #250
- Update CONTRIBUTING.md by @ajgarlag in #242
- Fix default symfony required version by @ajgarlag in #245
- fix(docs): code block typo by @bernard-ng in #241
- Deprecate eraseCredentials (symfony 7.3 compatibility) by @fxbt in #240
- fix redirect uri validation to allow apps like: com.my.app:/ by @MarvinG92 in #243
- Drop docker related stuff by @ajgarlag in #253
- Unlink cleaned up access tokens from refresh tokens by @frankdekker in #252
- Allow testing against
doctrine/doctrine-bundle:^3.0by @ajgarlag in #254 - Add support for Symfony 8 by @ajgarlag in #255
- Fix clients filtering when using
doctrinepersistence by @ajgarlag in #257 - Update unit tests configuration by @ajgarlag in #258
- Add PHP 8.5 support by @ajgarlag in #262
- Allow user override on auth request resolve event by @X-Coder264 in #263
- Fix coding standards and static analysis workflows by @ajgarlag in #265
- Remove legacy stuff by @ajgarlag in #264
- Fix redirection URLs when implicit grant is denied by @ajgarlag in #256
- enable_authenticator_manager is deprecated by @melroy89 in #261
New Contributors
- @bernard-ng made their first contribution in #241
- @fxbt made their first contribution in #240
- @MarvinG92 made their first contribution in #243
- @melroy89 made their first contribution in #261
New maintainer
Warm welcome to @ajgarlag who is joining the maintainer board of this bundle. Antonio does an excellent job improving and maintaining this bundle for years now, so it's time to recognize his huge impact on the project. Make sure to thank him if you use this package btw!
Full Changelog: v1.0.0...v1.1.0
-
v1.0.027 Apr 2025Release notes
Open source →Time to move!
What's Changed
- Update branch-alias to 1.x-dev by @chalasr in #232
- test: Fix incorrect class name by @theofidry in #233
- fix: Fix the configuration of the extension when DBAL is not configured by @theofidry in #141
- Remove BC layer for the legacy directory structure by @ajgarlag in #230
- [RFC] Move doctrine packages to suggest section by @ajgarlag in #235
- Remove polyfill requirement by @ajgarlag in #234
Full Changelog: v0.11...v1.0.0
-
v0.9.101 Feb 2025Release notes
Open source →What's Changed
- Fix Ci by @ajgarlag in #202
- Document the requirement for logged-in users by @ajgarlag in #201
- Fix tests compatibility with
league/oauth2-server:^9.1by @ajgarlag in #203 - Update tests matrix by @ajgarlag in #205
- fix: Fix the command GenerateKeyPair by @oharzallah-greenbull in #197
- Fix typo in command registration for GenerateKeyPairCommand by @rvanginneken in #204
- Fix client credentials comparing
oauth_user_idandoauth_client_idby @ajgarlag in #209
New Contributors
- @oharzallah-greenbull made their first contribution in #197
- @rvanginneken made their first contribution in #204
Full Changelog: v0.9.0...v0.9.1
-
v0.9.026 Aug 2024Release notes
Open source →What's Changed
- Fix orm tested version by @ajgarlag in #184
- Generate keys commands by @fbourigault in #108
- Add response message when not authenticated by @VincentLanglet in #189
- Migrate to docker compose V2 by @ajgarlag in #192
- Fix branch alias by @ajgarlag in #194
- Add compatibility with
league/oauth2-server:^9by @ajgarlag in #186 - Require a logged in user to resolve an authorization request by @ajgarlag in #196
New Contributors
- @fbourigault made their first contribution in #108
Full Changelog: v0.8.0...v0.9.0
-
v0.8.010 Mar 2024Nothing published for this version
-
v0.6.030 Dec 2023Nothing published for this version
-
v0.5.023 Apr 2023Nothing published for this version
-
v0.4.116 Oct 2022Nothing published for this version
-
v0.4.021 Jun 2022Nothing published for this version
-
v0.3.028 Dec 2021Nothing published for this version
-
v0.2.006 Nov 2021Nothing published for this version
-
v0.1.207 Oct 2021Nothing published for this version
-
v0.1.105 Oct 2021Nothing published for this version
-
v0.1.026 Sep 2021Nothing published for this version
-
v0.1106 Apr 2025Release notes
Open source →What's Changed
- Remove unused code by @ajgarlag in #221
- feat: Add jwt leeway configuration option by @frankdekker in #214
- Migrate from vimeo/psalm to phpstan/phpstan by @ajgarlag in #223
- feat: allow configuring revocation of refresh tokens by @fschmtt in #213
- New directory structure by @ajgarlag in #228
- Fix branch alias for v0.11 by @chalasr in #231
New Contributors
Full Changelog: v0.10...v0.11
-
v0.1013 Mar 2025Release notes
Open source →📢 LAST RELEASE BEFORE v1.0
What's Changed
- Fix tests by @chalasr in #215
- Require
league/oauth2-server:^9.2by @ajgarlag in #216 - Rename
NullUsertoClientCredentialsUserby @ajgarlag in #217 - Remove useless BC layer by @ajgarlag in #219
- Drop support for Symfony < 6.4 by @ajgarlag in #218
- Remove authenticator BC layer by @ajgarlag in #220
Full Changelog: v0.9.1...v0.10