The Authorization Server Built for Modern Teams
Secure, scalable, and fully customizable. Manage internal scopes, dynamic pages, Stripe subscriptions, and advanced RBAC with an elegant Laravel foundation.
{
"issuer": "https://www.elyerr.org",
"authorization_endpoint": "https://www.elyerr.org/oauth/authorize",
"token_endpoint": "https://www.elyerr.org/oauth/token",
"userinfo_endpoint": "https://www.elyerr.org/api/user",
"jwks_uri": "https://www.elyerr.org/oauth/jwks",
"scopes_supported": [
"openid", "profile", "email",
"internal", "admin:read",
"billing:premium"
],
"response_types_supported": [
"code", "token", "id_token"
],
"grant_types_supported": [
"authorization_code",
"refresh_token",
"client_credentials"
]
}
Internal Scope for Trusted Applications
Empower your first-party and internal microservices with a dedicated 'internal' scope, ensuring secure, high-trust communication without public exposure.
Private Scopes
Define scopes exclusively for your organization's trusted applications, keeping them hidden from third-party OAuth clients.
Zero Trust Ready
Combine internal scopes with service-to-service authentication for a robust, secure ecosystem.
Automatic Approval
Skip user consent screens for internal applications, providing a seamless user experience.
Dynamic Pages & Full Laravel Power
Create landing pages, marketing sites, or custom dashboards with the full force of Laravel and modern frontend tooling.
Vue.js Example:
@extends('layouts.pages')
@section('content')
<div id="app" v-cloak>
<h1 class="text-2xl font-bold">
@{{ greeting }}
</h1>
<button @click="fetchData"
class="bg-blue-600 text-white px-4 py-2 rounded">
Load Scopes
</button>
</div>
@endsection
@push('js')
<script nonce="5baac3dde8712da824c5b4d0a124a7d1">
const { createApp, ref } = Vue;
createApp({
setup() {
const greeting = ref("Welcome!");
const scopes = ref([]);
const fetchData = async () => {
const res = await $server.get('/api/scopes');
scopes.value = res.data;
};
return { greeting, scopes, fetchData };
}
}).mount('#app');
</script>
@endpush
jQuery Example:
@push('js')
<script nonce="5baac3dde8712da824c5b4d0a124a7d1">
$(function() {
$('#loadScopes').on('click', function() {
$.ajax({
url: '/api/scopes',
method: 'GET',
success: function(data) {
data.forEach(function(scope) {
$('#scopesList').append('<li>' + scope + '</li>');
});
}
});
});
});
</script>
@endpush
OAuth Client Management
Control every aspect of your OAuth server and modules through an intuitive, yet powerful admin interface.
{
"id": "019da2d4-d067-70ac-9431-da3dc826f110",
"name": "Client",
"secret": "q91KryYJpYAOgPCm3KzJxHqHQq8RNl2BlR3Cnpmf",
"confidential": true,
"created_by": {
"name": "Chanelle Reinger",
"email": "damore.noemie@example.net"
},
"redirect_uris": [
"https://www.domain.org/callback"
],
"grant_types": "authorization_code, refresh_token",
"discovery_uri": "https://www.elyerr.org/.well-known/openid-configuration",
"created_at": "2026-04-18 18:02:29",
"updated_at": "2026-04-18 18:02:29"
}
Advanced Scope Management & Monetization
Granular permissions mapped to groups, services, and roles. Monetize your API using scopes as subscription plans.
Hierarchical Scopes
Define complex permissions with a clear hierarchy. Map scopes to user roles, groups, and services dynamically.
Stripe Integration
Turn scopes into subscription plans. Grant or revoke API access automatically based on billing status.
Advanced Configuration Panel
Control every aspect of your OAuth server and modules through an intuitive, yet powerful admin interface.
Open Source & Community Driven
This project is open source and free to use. Join our community to get help, share ideas, and contribute to the development.
Ready to Secure Your Ecosystem?
Deploy your private authorization server in minutes. Full control, unlimited potential.