mirror of
https://github.com/elyby/oauth2-server.git
synced 2024-11-02 00:43:11 +05:30
47 lines
1.7 KiB
Markdown
Executable File
47 lines
1.7 KiB
Markdown
Executable File
---
|
||
layout: default
|
||
title: Installation
|
||
permalink: /installation/
|
||
---
|
||
|
||
# Installation
|
||
|
||
The recommended installation method is using [Composer](https://getcomposer.org).
|
||
|
||
The following versions of PHP are supported:
|
||
|
||
* PHP 5.5 (>=5.5.9)
|
||
* PHP 5.6
|
||
* PHP 7.0
|
||
* HHVM
|
||
|
||
In your project root just run:
|
||
|
||
{% highlight shell %}
|
||
$ composer require league/oauth2-server:5.0.0-RC1
|
||
{% endhighlight %}
|
||
|
||
Ensure that you’ve set up your project to [autoload Composer-installed packages](https://getcomposer.org/doc/00-intro.md#autoloading).
|
||
|
||
Depending on [which grant](/authorization-server/which-grant/) you are implementing you will need to implement a number of repository interfaces. Each grant documentation page lists which repositories are required, and each repository interface has it's own documentation page.
|
||
|
||
The repositories are expected to return (on success) instances of [entity interfaces](https://github.com/thephpleague/oauth2-server/tree/V5-WIP/src/Entities/Interfaces); to make integration with your existing entities and models as easy as possible though, all required methods have been implemented as traits that you can use.
|
||
|
||
## Generating public and private keys
|
||
|
||
To generate the private key run this command on the terminal:
|
||
|
||
{% highlight shell %}
|
||
openssl genrsa -out private.key 1024
|
||
{% endhighlight %}
|
||
|
||
then extract the public key from the private key:
|
||
|
||
{% highlight shell %}
|
||
openssl rsa -in private.key -pubout > public.key
|
||
{% endhighlight %}
|
||
|
||
The private key must be kept secret (i.e. out of the web-root of the authorization server). The authorization server also requires the public key.
|
||
|
||
The public key should be distributed to any services (for example resource servers) that validate access tokens.
|