Skip to content

Allow additional parameters for the authorization request - #41

Merged
robertlemke merged 3 commits into
mainfrom
task/authorization-parameters
Sep 11, 2026
Merged

robertlemke merged 3 commits into
mainfrom
task/authorization-parameters

Conversation

@robertlemke

Copy link
Copy Markdown
Member

startAuthorization() and startAuthorizationWithId() now accept additional query parameters for the authorization endpoint, for example prompt, login_hint or ui_locales. Parameters which the client sets itself, like state, scope or redirect_uri, are rejected with an exception.

Until now, callers could only pass the scope and had to append other parameters to the returned URI afterwards.

startAuthorization() and startAuthorizationWithId() now accept
additional query parameters for the authorization endpoint, for example
"prompt", "login_hint" or "ui_locales". Parameters which the client
sets itself, like "state" or "redirect_uri", are rejected.

Previously, callers could only pass the scope. Other parameters had to
be appended to the returned URI afterwards.
The test matrix no longer cancels the remaining jobs after the first
failure. This shows at a glance which combinations of PHP versions and
dependency sets are affected.
The package now requires league/oauth2-client 2.9 or later.

Version 2.9.0 is the first release which supports PHP 8.5. Older
releases declare parameters as implicitly nullable, which PHP 8.4 and
later report as deprecated. With the lowest dependencies, a test which
creates an authorization URI therefore failed on PHP 8.5.
@robertlemke
robertlemke merged commit 5c2cd4a into main Sep 11, 2026
6 checks passed
@robertlemke
robertlemke deleted the task/authorization-parameters branch September 11, 2026 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant