Skip to content

index.md

Latest commit

 

History

History
33 lines (26 loc) · 1.81 KB

index.md

File metadata and controls

33 lines (26 loc) · 1.81 KB
Raw

CakeDC OAuth Server documentation

An OAuth 2.1 authorization server for any PHP application, ready for MCP servers. Read the pages in order the first time, then use them as a reference.

Getting started

  • Concepts: OAuth in plain words, the authorization code flow with PKCE, and the three kinds of client.
  • Installation: requirements, creating the tables, first configuration and routing.
  • Configuration: every setting, its type and default.
  • Users: connecting your people, permissions and login.
  • Storage: PdoStorage, InMemoryStorage, your own storage and the schema.

Using the server

  • Endpoints: the HTTP reference for every endpoint, with curl examples.
  • Errors: every error code, when it happens and what to do.
  • Protecting resources: BearerTokenMiddleware and TokenValidator.
  • MCP servers: the bridge for the official MCP PHP SDK.
  • Frameworks: plain PHP, Slim, Mezzio, Symfony and Laravel.
  • Clients: client types, registering clients, claude.ai, Claude Code, the Inspector.
  • Pages: the consent and connections pages, custom renderers and translations.
  • Personal tokens: tokens people create for their scripts.
  • Events: PSR-14 events and an audit log.

Running it

  • Security: the threat model, RFC 9700 item by item, and the production checklist.
  • Deployment: proxies, nginx, Apache, Cloudflare and CORS.
  • Operations: pruning, revoking tokens, rotating the secret and monitoring.
  • Troubleshooting: symptoms, causes and fixes.
  • Conformance: the official MCP conformance suite and how to run it.