PHPackages                             fisk/steam-openid - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. fisk/steam-openid

ActiveLibrary[Authentication & Authorization](/categories/authentication)

fisk/steam-openid
=================

Steam OpenID consumer library

0.3.3(1y ago)55.1k↑150%3[1 issues](https://github.com/fiskWasTaken/php-steam-openid/issues)MITPHPPHP ^7.2|^8.0

Since Dec 23Pushed 1y ago1 watchersCompare

[ Source](https://github.com/fiskWasTaken/php-steam-openid)[ Packagist](https://packagist.org/packages/fisk/steam-openid)[ Docs](https://github.com/fisuku/php-steam-openid)[ RSS](/packages/fisk-steam-openid/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (1)Versions (7)Used By (0)

Steam OpenID Authentication for PHP [![Build Status](https://camo.githubusercontent.com/3a631a74dd57cdae3b111a919d80952ecaad3cb229a4cc6bd474de6c91548db5/68747470733a2f2f7472617669732d63692e6f72672f666973756b752f7068702d737465616d2d6f70656e69642e7376673f6272616e63683d6d6173746572)](https://travis-ci.org/fisuku/php-steam-openid)
========================================================================================================================================================================================================================================================================================================================================

[](#steam-openid-authentication-for-php-)

```
composer require fisk/steam-openid

```

A simple, secure library for Steam OpenID clients.

```
$client = new \SteamOpenID\SteamOpenID("http://example.com");

if ($client->hasResponse()) {
    try {
        $result = $client->validate();
        print("Signed in as {$result}!");
    } catch (Exception $e) {
        print($e->getMessage());
    }
} else {
    // redirect the user to Steam, however this is done in your app
    header('Location: '.$client->getAuthUrl());
}
```

`php -S localhost:8000 example.php` will fire up an example server that redirects to the OpenID gateway and prints out the returned signed-in user ID.

This library does not aim to be a completely universal OpenID client, as we just want it to meet our needs for the Steam OpenID gateway.

This is a fork of a library originally written by xPaw. The original project readme follows:

---

A very minimalistic OpenID implementation that hardcodes it for Steam only, as using a generic OpenID library may do unnecessary steps of “discovering” OpenID servers, which will end up leaking your origin server address, and worse, leave your website open to vulnerabilities of claiming wrong Steam profiles if the implementation is bugged.

The described problems are not theoretical, LightOpenID [has been proven](https://twitter.com/thexpaw/status/1088207320977412097)to have implementation problems, and even if you use `validate` and use regex on the final `identity` it can be spoofed and a third-party server can be used to pass the validation.

This library aims to avoid these problems by implementing the bare minimum functionality required for validating Steam OpenID requests against the hardcoded Steam server. This library only implements validation, you will need to implement Steam WebAPI calls yourself to fetch user profile information.

Before using this library, [please read Valve's terms here](https://steamcommunity.com/dev).

###  Health Score

36

—

LowBetter than 82% of packages

Maintenance38

Infrequent updates — may be unmaintained

Popularity27

Limited adoption so far

Community14

Small or concentrated contributor base

Maturity53

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 57.9% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~302 days

Recently: every ~378 days

Total

6

Last Release

460d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/10fa3c8961248118241ba63d476e8bd5fc54fe67b5710bd676383d3ceb1d1f59?d=identicon)[fisk](/maintainers/fisk)

---

Top Contributors

[![xPaw](https://avatars.githubusercontent.com/u/613331?v=4)](https://github.com/xPaw "xPaw (11 commits)")[![fiskWasTaken](https://avatars.githubusercontent.com/u/4458941?v=4)](https://github.com/fiskWasTaken "fiskWasTaken (6 commits)")[![3xlneet](https://avatars.githubusercontent.com/u/6967426?v=4)](https://github.com/3xlneet "3xlneet (1 commits)")[![Jessecar96](https://avatars.githubusercontent.com/u/1954840?v=4)](https://github.com/Jessecar96 "Jessecar96 (1 commits)")

---

Tags

OpenIdsteamvalvesteamcommunity

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/fisk-steam-openid/health.svg)

```
[![Health](https://phpackages.com/badges/fisk-steam-openid/health.svg)](https://phpackages.com/packages/fisk-steam-openid)
```

###  Alternatives

[hybridauth/hybridauth

PHP Social Authentication Library

3.4k8.5M94](/packages/hybridauth-hybridauth)[xpaw/steam-openid

A correct and simple implementation of OpenID authentication for Steam

5322.3k](/packages/xpaw-steam-openid)[auth0/auth0-php

PHP SDK for Auth0 Authentication and Management APIs.

40820.2M68](/packages/auth0-auth0-php)[opauth/opauth

Multi-provider authentication framework for PHP

1.6k783.4k58](/packages/opauth-opauth)[auth0/login

Auth0 Laravel SDK. Straight-forward and tested methods for implementing authentication, and accessing Auth0's Management API endpoints.

2745.0M3](/packages/auth0-login)[socialiteproviders/steam

Steam OpenID Provider for Laravel Socialite

21536.2k2](/packages/socialiteproviders-steam)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)