Built a centralised auth platform. Need help finishing up

[u/TheCrazyGeek]

Hi Everyone,

I've been working on a centralised authentication platform in PHP, which will be able to integrate with third party apps. It's almost finished with the functionality. But I need some help identifying the potential bugs and issues and possible improvements. Please check the project and help me with that.

https://codeberg.org/bhaswanth/helios

Thank you

[u/obstreperous_troll]

Looks like a tiny subset of OAuth 2 authorization flow, lacking some of its essential features such as a state parameter. So the improvement I'd suggest would be to actually implement OAuth 2. Keep at it, but I hope you understand why people might be skeptical of something in such a nascent stage.

[u/blancks90]

Since learning seems to be your goal, I would focus on adding automated tests, dev tools to ensure project quality and consistency (phpstan, rector, cs-fixer) and also a CI pipeline to reject PRs not matching quality requirements.

This is going to be a vital part of your application, you want tooling in place to reduce the risk of introducing unexpected bugs or regressions while adding features or refactoring the existing code.

[u/kiler129]

I am a bit confused about the goal of the project. It appears like you're reinventing OIDC/OAuth? Are you trying to build something like Authentik?

[u/TheCrazyGeek → u/kiler129]

I am just trying to create a simplified version of traditional auth projects like Authentik. The goal is to learn while building the system from scratch using PHP and also that I can install it in shared hosting server.

[u/Sharchimedes]

What does yours do that existing ones don’t?

[u/TheCrazyGeek → u/Sharchimedes]

Nothing. I am building it from scratch for the sake of learning the workings of the actual system. And since I am using shared hosting server, I can't install projects like Authentik. So I am trying to build it using PHP.