This is a security release for the 8.x-4.x branch. This is the last planned release for the 8.x-4.x major version of Simple OAuth.

This release corresponds with the announcement of EOL dates for the 8.x-4.x and 5.0.x branches, and the tagging of 5.1.0. The upgrade path from prior versions is well tested and supported, and all site owners are encouraged to update to 5.1.x as soon as possible. See the project page for details on EOL dates.

See Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2022-002.

VCS Label
8.x-4.6
Core compatibility
Release type
Short description
Security release; final planned release for 8.x-4.x.
Packaged Git sha1
2591a2e2897cc5d1c7e4f7f827fb9bef1e99d936
Release files
0a68d30b650d04885f18d1c0eafbb7da
Release file SHA-1 hash
1c00343c61be53e1fc05c0c5b5875f3e6e90bd32
Release file SHA-256 hash
1ddba6d50d3af8b9f93e3d0c7c0cb4350bd9b87ab75a82b428bba278d8d99c22
16db3fec6073f1b4c6064962b4ad5f61
Release file SHA-1 hash
5687946a8966a6950ccc07fbdfdacc86e37e7eba
Release file SHA-256 hash
076da8898153b2829c2cef2aa86df3d9dd673438fde41d2e4e119f9c59ad390f