Singpass Login Laravel Package

Product Decisions This Supports

• SingPass/Corppass Integration: Enables seamless authentication for government (SingPass) and corporate (Corppass) identity providers via FAPI 2.0, aligning with Singapore’s digital identity ecosystem.
• Compliance & Security: Supports strict type declarations and enhanced static analysis (PHPStan), reducing runtime errors and improving security posture for regulated applications.
• Legacy Modernization: Facilitates migration from older JWT frameworks (e.g., web-token/jwt-framework) to more secure, standards-compliant implementations.
• CI/CD Optimization: Updates to GitHub Actions (e.g., actions/upload-artifact, actions/cache) improve build efficiency and artifact management for Laravel-based projects.
• Roadmap for Multi-Provider Auth: Foundation for future expansions (e.g., OAuth2/OIDC integrations) by leveraging FAPI 2.0’s modular design.

When to Consider This Package

Adopt if:

• Your Laravel app requires SingPass/Corppass authentication (Singapore government/corporate SSO).
• You prioritize FAPI 2.0 compliance for financial-grade API security (e.g., banking, healthcare).
• Your team needs strict type safety and enhanced static analysis (PHPStan) to reduce bugs in production.
• You’re migrating from older JWT libraries (e.g., lucadegasperi/oauth2-server-laravel) to modern standards.

Look elsewhere if:

• You’re outside Singapore and don’t need SingPass/Corppass integration (package is niche).
• Your stack is non-Laravel/PHP (e.g., Node.js, Python).
• You require OAuth2/OIDC without FAPI 2.0 (consider league/oauth2-server or knuckleswtf/vapor).
• Your project lacks resources for strict typing or CI/CD tooling updates (dependency bumps may require maintenance).

How to Pitch It (Stakeholders)

For Executives: "This package lets us integrate SingPass/Corppass authentication into our Laravel app with FAPI 2.0—Singapore’s gold standard for secure digital identity. It’s battle-tested by the government, reduces fraud risk, and aligns with our compliance goals. The v3.0 update adds stricter code quality checks (like PHPStan) to catch bugs early, saving us costly fixes later. Minimal dev lift; we just plug it in."

For Engineering: *"v3.0 brings FAPI 2.0 + Corppass support, which is a game-changer for SingPass integrations. Key upgrades:

• Strict types (better IDE support, fewer runtime errors).
• PHPStan + coverage maxing (proactive bug hunting).
• GitHub Actions optimizations (faster CI builds).
• JWT framework update (security patches). Tradeoff: Dependency bumps may need CI tweaks, but the security/compliance payoff is huge. Recommended for any auth-heavy Laravel project targeting SG markets."*