<commit_before>[![Build Status](https://travis-ci.org/fkooman/php-oauth2-server.svg?branch=master)](https://travis-ci.org/fkooman/php-oauth2-server)
[![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/fkooman/php-oauth2-server/badges/quality-score.png?b=master)](https://scrutinizer-ci.com/g/fkooman/php-oauth2-server/?branch=master)

# Introduction
This is a very simple OAuth 2.0 server for integration in your own application. 
It has minimal dependencies, but still tries to be secure. The main purpose is 
to be compatible with PHP 5.4.

**NOTE**: if you are not bound to PHP 5.4, use the OAuth 2.0 server of 
the League of Extraordinary Packages! It can be found 
[here](https://oauth2.thephpleague.com/).

# Features

- Simplicity
- Easy integration with your own application and/or framework;
- Does not enforce a framework on you;
- Only conforming OAuth 2.0 servers will work, this library will not get out of 
  its way to deal with services that blatantly violate the OAuth 2.0 RFC, the 
  exception may be if a fix does not break conforming servers;
- There will be no toggles to shoot yourself in the foot;
- Uses `random_bytes` polyfill on PHP < 7.0 for generating tokens and codes<commit_msg>update README a bit<commit_after>[![Build Status](https://travis-ci.org/fkooman/php-oauth2-server.svg?branch=master)](https://travis-ci.org/fkooman/php-oauth2-server)
[![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/fkooman/php-oauth2-server/badges/quality-score.png?b=master)](https://scrutinizer-ci.com/g/fkooman/php-oauth2-server/?branch=master)

# Introduction
This is a very simple OAuth 2.0 server for integration in your own application. 
It has minimal dependencies, but still tries to be secure. The main purpose is 
to be compatible with PHP 5.4.

**NOTE**: if you are not bound to PHP 5.4, use the OAuth 2.0 server of 
the League of Extraordinary Packages! It can be found 
[here](https://oauth2.thephpleague.com/).

# Clients

All (optional) OAuth authorization and token requests MUST always be sent.

# Features

- Simplicity
- Easy integration with your own application and/or framework;
- Does not enforce a framework on you;
- Only conforming OAuth 2.0 clients will work, this library will not get out of 
  its way to deal with clients that blatantly violate the OAuth 2.0 RFC, the 
  exception may be if a fix does not break conforming clients;
- There will be no toggles to shoot yourself in the foot;
- Uses `random_bytes` polyfill on PHP < 7.0 for generating tokens and codes;
- Supports [PKCE](https://tools.ietf.org/html/rfc7636);
{'fraction_non_alphanumeric': 0.09856422196352348, 'fraction_numerical': 0.01629802095459837, 'mean_word_length': 4.304526748971194, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 3, 'https://': 11, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '582616', 'n_tokens_mistral': 840, 'n_tokens_neox': 803, 'n_words': 302}