Packagist · #1465 most downloaded on Packagist

league/oauth2-server-bundle

v1.2.26.1M downloads/mothephpleague/oauth2-server-bundle ↗New releases in your daily digest, changelog included.

Symfony bundle .

Last release 2 months ago
26 Jul 2026
Release timing varies
gaps range from 8 days to 8 months
Some releases are documented
notes for 10 of 20 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
20 releases · first in 2021

Release timeline

20 releases since 2021

202120222023202420252026

20212026

One column per quarter.

Releases

v1.2.226 Jul 2026Deprecated
Skip deprecated service references when unnecessary by @ajgarlag in #299
Full Changelog: v1.2.1...v1.2.2

What's Changed

Fix BC break: avoid device code revocation if not enabled by @ajgarlag in #298

Skip deprecated service references when unnecessary by @ajgarlag in #299

Document how to reduce secret hashing cost by @chalasr in #302

Full Changelog: v1.2.1...v1.2.2
Open source →
v1.2.122 Jul 2026

v1.2.017 Jul 2026Deprecated

Deprecate not setting enable_password_grant and enable_implicit_grant by @ajgarlag in #279

What's Changed

feat: Add support for device code grant by @SimonVanacco in #229
Fix CS by @ajgarlag in #275
Update GitHub Actions by @ajgarlag in #276
Fix usage of virtual method ClientInterface::getName by @ajgarlag in #274
Add upgrade guide by @ajgarlag in #281
Deprecate not setting enable_password_grant and enable_implicit_grant by @ajgarlag in #279
Update upgrade guide by @ajgarlag in #282
Fix grant restriction for public clients on League OAuth2 Server v9 by @JorisMarnasBO in #280
Fix compatibility with league/oauth2-server: 9.4.0 by @ajgarlag in #284
Allow setting extra claims to the access token by @ajgarlag in #272
ci: Introduce a meta job for the tests by @theofidry in #166
Update Symfony supported versions by @ajgarlag in #277
Fix order of converting user by @RobertMe in #147
Fix BC break by @ajgarlag in #285
store client-secret as hash only by @ajgarlag and @Thomblin in #283
fix: #225: GrantConfigurator should accept League\OAuth2\Server\Grant… by @TLG-Gildas in #227
Fix upgrade guide by @ajgarlag in #288
Prevent call to undefined method setSecret when rehashing client secrets by @ajgarlag in #289
Refactor test kernel configuration by @ajgarlag in #286
Codebase modernization by @ajgarlag in #290

New Contributors

@SimonVanacco made their first contribution in #229
@JorisMarnasBO made their first contribution in #280
@Thomblin made their first contribution in #283
@TLG-Gildas made their first contribution in #227

Full Changelog: v1.1.1...v1.2.0

Open source →

v1.1.011 Dec 2025Deprecated

Deprecate eraseCredentials (symfony 7.3 compatibility) by @fxbt in #240

What's Changed

fix: Test for availability of doctrine in bundle configuration by @frankdekker in #246
Fix Coding Standards by @ajgarlag in #250
Update CONTRIBUTING.md by @ajgarlag in #242
Fix default symfony required version by @ajgarlag in #245
fix(docs): code block typo by @bernard-ng in #241
Deprecate eraseCredentials (symfony 7.3 compatibility) by @fxbt in #240
fix redirect uri validation to allow apps like: com.my.app:/ by @MarvinG92 in #243
Drop docker related stuff by @ajgarlag in #253
Unlink cleaned up access tokens from refresh tokens by @frankdekker in #252
Allow testing against doctrine/doctrine-bundle:^3.0 by @ajgarlag in #254
Add support for Symfony 8 by @ajgarlag in #255
Fix clients filtering when using doctrine persistence by @ajgarlag in #257
Update unit tests configuration by @ajgarlag in #258
Add PHP 8.5 support by @ajgarlag in #262
Allow user override on auth request resolve event by @X-Coder264 in #263
Fix coding standards and static analysis workflows by @ajgarlag in #265
Remove legacy stuff by @ajgarlag in #264
Fix redirection URLs when implicit grant is denied by @ajgarlag in #256
enable_authenticator_manager is deprecated by @melroy89 in #261

New Contributors

@bernard-ng made their first contribution in #241
@fxbt made their first contribution in #240
@MarvinG92 made their first contribution in #243
@melroy89 made their first contribution in #261

New maintainer

Warm welcome to @ajgarlag who is joining the maintainer board of this bundle. Antonio does an excellent job improving and maintaining this bundle for years now, so it's time to recognize his huge impact on the project. Make sure to thank him if you use this package btw!

Full Changelog: v1.0.0...v1.1.0

Open source →

v1.0.027 Apr 2025

Update branch-alias to 1.x-dev by @chalasr in #232

Time to move!

What's Changed

Update branch-alias to 1.x-dev by @chalasr in #232
test: Fix incorrect class name by @theofidry in #233
fix: Fix the configuration of the extension when DBAL is not configured by @theofidry in #141
Remove BC layer for the legacy directory structure by @ajgarlag in #230
[RFC] Move doctrine packages to suggest section by @ajgarlag in #235
Remove polyfill requirement by @ajgarlag in #234

Full Changelog: v0.11...v1.0.0

Open source →

v0.9.11 Feb 2025

Document the requirement for logged-in users by @ajgarlag in #201

What's Changed

Fix Ci by @ajgarlag in #202
Document the requirement for logged-in users by @ajgarlag in #201
Fix tests compatibility with league/oauth2-server:^9.1 by @ajgarlag in #203
Update tests matrix by @ajgarlag in #205
fix: Fix the command GenerateKeyPair by @oharzallah-greenbull in #197
Fix typo in command registration for GenerateKeyPairCommand by @rvanginneken in #204
Fix client credentials comparing oauth_user_id and oauth_client_id by @ajgarlag in #209

New Contributors

@oharzallah-greenbull made their first contribution in #197
@rvanginneken made their first contribution in #204

Full Changelog: v0.9.0...v0.9.1

Open source →

v0.9.026 Aug 2024

Fix orm tested version by @ajgarlag in #184

What's Changed

Fix orm tested version by @ajgarlag in #184
Generate keys commands by @fbourigault in #108
Add response message when not authenticated by @VincentLanglet in #189
Migrate to docker compose V2 by @ajgarlag in #192
Fix branch alias by @ajgarlag in #194
Add compatibility with league/oauth2-server:^9 by @ajgarlag in #186
Require a logged in user to resolve an authorization request by @ajgarlag in #196