require_once(‘/path/to/oauth2-server-php/src/OAuth2/Autoloader.php‘);
OAuth2\Autoloader::register();

$storage = new OAuth2\Storage\Pdo(array(‘dsn‘ => $dsn, ‘username‘ => $username, ‘password‘ => $password));
$server = new OAuth2\Server($storage);
$server->addGrantType(new OAuth2\GrantType\AuthorizationCode($storage)); // or any grant type you like!
$server->handleTokenRequest(OAuth2\Request::createFromGlobals())->send();

$ curl -u testclient:testpass "http://localhost/token.php" -d ‘grant_type=password&username=someuser&password=somepassword‘
{"access_token":"206c80413b9a96c1312cc346b7d2517b84463edd","expires_in":3600,"token_type":"bearer","scope":null}

$ curl -u testclient:testpass "http://localhost/token.php" -d ‘grant_type=client_credentials‘
{"access_token":"6f05ad622a3d32a5a81aee5d73a5826adb8cbf63","expires_in":3600,"token_type":"bearer","scope":null}

$ curl -u testclient:testpass "http://localhost/token.php" -d ‘grant_type=refresh_token&refresh_token=c54adcfdb1d99d10be3be3b77ec32a2e402ef7e3‘
{"access_token":"0e9d02499fe06762ecaafb9cfbb506676631dcfd","expires_in":3600,"token_type":"bearer","scope":null}

$storage = new OAuth2\Storage\Pdo(array(‘dsn‘ => $dsn, ‘username‘ => $username, ‘password‘ => $password));
$server = new OAuth2\Server($storage, array(‘allow_implicit‘ => true));

$server->handleAuthorizeRequest(OAuth2\Request::createFromGlobals())->send();

$server->addGrantType(new OAuth2\GrantType\UserCredentials($storage));
$server->addGrantType(new OAuth2\GrantType\RefreshToken($storage));
$server->addGrantType(new OAuth2\GrantType\AuthorizationCode($storage));

$request = OAuth2\Request::createFromGlobals();

// call the OAuth server with it
$server->handleTokenRequest($request);

// use HttpFoundation Requests instead, for Symfony / Twig / Laravel 4 / Drupal 8 / etc!
$symfony_request = Symfony\Component\HttpFoundation\Request::createFromGlobals();
$request = OAuth2\HttpFoundationBridge\Request::createFromRequest($symfony_request)

// call the OAuth server with it
$server->handleTokenRequest($request);

$request = OAuth2\Request::createFromGlobals();
$response = new OAuth2\Response();

// will set headers, status code, and json response appropriately for success or failure
$server->grantAccessToken($request, $response);
$response->send();

if (!$token = $server->grantAccessToken($request, $response)) {
    $response->send();
    die();
}
echo sprintf(‘Your token is %s!!‘, $token);

if (!$token = $server->grantAccessToken($request, $response)) {
    $parameters = $response->getParameters();
    // format as XML
    header("HTTP/1.1 " . $response->getStatusCode());
    header("Content-Type: text/xml");
    echo "<error><name>".$parameters[‘error‘]."</name><message>".$parameters[‘error_description‘]."</message></error>";
}

// configure your available scopes
$defaultScope = ‘basic‘;
$supportedScopes = array(
  ‘basic‘,
  ‘postonwall‘,
  ‘accessphonenumber‘
);
$memory = new OAuth2\Storage\Memory(array(
  ‘default_scope‘ => $defaultScope,
  ‘supported_scopes‘ => $supportedScopes
));
$scopeUtil = new OAuth2\Scope($memory);

$server->setScopeUtil($scopeUtil);

// configure your available scopes
$doctrine = Doctrine_Core::getTable(‘OAuth2Scope‘);
$scopeUtil = new OAuth2\Scope($doctrine);

$server->setScopeUtil($scopeUtil);

class OAuth2ScopeTable extends Doctrine_Table implements OAuth2\Storage\ScopeInterface
{
    public function getDefaultScope($client_id = null)
    {
        //...
    }

    public function scopeExists($scope, $client_id = null)
    {
        //...
    }
}

// https://api.example.com/resource-requiring-postonwall-scope
$request = OAuth2\Request::createFromGlobals();
$response = new OAuth2\Response();
$scopeRequired = ‘postonwall‘; // this resource requires "postonwall" scope
if (!$server->verifyResourceRequest($request, $response, $scopeRequired)) {
  // if the scope required is different from what the token allows, this will send a "401 insufficient_scope" error
  $response->send();
}

// on creation
$server = new OAuth2\Server($storage, array(‘enforce_state‘ => false));

// or after creation
$server = new OAuth2\Server();
$server->setConfig(‘enforce_state‘, false);

https://mydomain.com/authorize
   ?client_id=MY_CLIENT
   &response_type=code
   &scope=onescope%20twoscope%20redscope%20bluescope

$scope = new OAuth2\Scope(array(
  ‘supported_scopes‘ => array(‘onescope‘, ‘twoscope‘, ‘redscope‘, ‘bluescope‘)
));
$server->setScopeUtil($scope);

$userid = 1234; // A value on your server that identifies the user
$server->handleAuthorizeRequest($request, $response, $is_authorized, $userid);

if (!$server->verifyResourceRequest(OAuth2\Request::createFromGlobals())) {
    $server->getResponse()->send();
    die;
}

$token = $server->getAccessTokenData(OAuth2\Request::createFromGlobals());
echo "User ID associated with this token is {$token[‘user_id‘]}";

ALTER TABLE oauth_authorization_codes ADD id_token VARCHAR(1000)  NULL  DEFAULT NULL;

// create storage object
$storage = new OAuth2\Storage\Pdo(array(‘dsn‘ => $dsn, ‘username‘ => $username, ‘password‘ => $password));

// configure the server for OpenID Connect
$config[‘use_openid_connect‘] = true;
$config[‘issuer‘] = ‘brentertainment.com‘;

// create the server
$server = new OAuth2\Server($storage, $config);

$publicKey  = file_get_contents(‘/path/to/pubkey.pem‘);
$privateKey = file_get_contents(‘/path/to/privkey.pem‘);
// create storage
$keyStorage = new OAuth2\Storage\Memory(array(‘keys‘ => array(
    ‘public_key‘  => $publicKey,
    ‘private_key‘ => $privateKey,
)));

$server->addStorage($keyStorage, ‘public_key‘);

// create a request object to mimic an authorization code request
$request = new OAuth2\Request(array(
    ‘client_id‘     => ‘SOME_CLIENT_ID‘,
    ‘redirect_uri‘  => ‘http://brentertainment.com‘,
    ‘response_type‘ => ‘code‘,
    ‘scope‘         => ‘openid‘,
    ‘state‘         => ‘xyz‘,
));
$response = new OAuth2\Response();
$server->handleAuthorizeRequest($request, $response, true);

// parse the returned URL to get the authorization code
$parts = parse_url($response->getHttpHeader(‘Location‘));
parse_str($parts[‘query‘], $query);

// pull the code from storage and verify an "id_token" was added
$code = $server->getStorage(‘authorization_code‘)
        ->getAuthorizationCode($query[‘code‘]);
var_export($code);

array (
  ‘code‘ => ‘3288362b828be2cf9eb2327bb30773a45c3fc151‘,
  ‘client_id‘ => ‘SOME_CLIENT_ID‘,
  ‘user_id‘ => NULL,
  ‘redirect_uri‘ => ‘http://brentertainment.com‘,
  ‘expires‘ => 1442944611,
  ‘scope‘ => ‘openid‘,
  ‘id_token‘ => ‘eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJvY
  XV0aDItc2VydmVyLWJ1bmRsZSIsInN1YiI6bnVsbCwiYXVkIjoidGVzdC1jbGllbn
  QtNTM4MDM0ODkyIiwiaWF0IjoxNDQyOTQ0NTgxLCJleHAiOjE0NDI5NDgxODEsImF
  1dGhfdGltZSI6MTQ0Mjk0NDU4MX0.Ev-vPTeL1CxmSRpvV0l1nyeogpeKO2uQDuVt
  YbVCphfA8sLBWAVFixnCqsZ2BSLf30KzDCSzQCvSh8jgKOTQAsznE69ODSXurj3NZ
  0IBufgOfLjGi0E4JvI_KksAVewy53mcN2DBSRmtJjwZ8BKjzQnOIJ77LGpQKvpW4S
  kmZE4‘,
)