PHP Identity Link

PHP Identity Link is an OAuth2 server implemented using Symfony and PHP. The project is designed with a microservices architecture, where each repository represents a distinct service. The communication is unidirectional from the core service to the other components, which do not interact directly with each other. Access to the components is secured using JWT tokens issued by the core service. Here’s an overview of the main components:

Components

• Core: The main service responsible for issuing and validating tokens.
• DB Clients: Manages the client entities that can request tokens.
• DB Users: Manages the user entities and their authentication.
• 2FA Google: Provides two-factor authentication support using Google Authenticator.
• Shared: Contains shared libraries and utilities used across the other components.

Architecture

Core issues and validates JWT tokens. DB Clients and DB Users handle client and user data respectively, accessible only via valid tokens from the core. 2FA Google integrates Google Authenticator for two-factor authentication, enhancing security. Shared libraries ensure reusable and maintainable code across services.

Example Workflow

User Authentication: The user authenticates through the core service, receiving a JWT token. Client/User Management: The user can manage clients and users via the DB Clients and DB Users services using the token. Two-Factor Authentication: For enhanced security, the user sets up two-factor authentication through the 2FA Google service.

Docker image

The application is fully functional and available as a Docker image. To start using it you will have to install Docker and Docker compose.

The Docker setup relies on few environment variables used for configuration. Please review and define these as needed. Refer to docker compose documentation for more information about environment variables.

Start with docker compose:

docker-compose --project-name php-identity-link \
 -f php-identity-link/docker-compose.yml \ 
 -f php-identity-link-2fa-google/docker-compose.yml \ 
 -f php-identity-link-db-users/docker-compose.yml \
 -f php-identity-link-db-clients/docker-compose.yml \
 --env-file ~/.env up

Testing

You can execute all tests using the command bellow.

docker exec -it core bash -c "cd /var/www; php bin/phpunit"