denniseilander/laravel-passport-scopes-restriction
Restrict which OAuth scopes users can request with Laravel Passport. Assign allowed scopes per user or model and enforce them during token issuance, so clients can't obtain permissions they shouldn't have—keeping API access tightly scoped with minimal setup.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mpyw/scoped-auth | 0.87 | Scoped authentication for Laravel: assign different guards and user providers to individual route groups, domains, or tenants so Auth resolves the correct user per context. Handy for multi-tenant and multi-domain apps needing per-scope login without global config changes. | 11 | 11 | 3 | 246 | 0 | 13.2 | 20.5 | MIT | 4 months ago | |
| spatie/laravel-authorize | 0.86 | Route middleware for Laravel authorization. Protect routes and groups using Laravel’s Gate abilities via the can: middleware syntax, with support for route model binding (e.g., can:editPost,post) to authorize access to specific models. | 201 | 206 | 19 | 198 | 0 | 3.4 | 4.1 | MIT | 10 years ago | |
| ejarnutowski/laravel-api-key | 0.86 | ejarnutowski/laravel-api-key adds lightweight API key authentication to Laravel applications. Create keys, attach them to users or any model, and guard routes with middleware—a simple alternative to Passport or Sanctum for token-based API access. | 157 | — | 79 | — | 1 | 3.5 | 0.4 | MIT | — | |
| xcoorp/laravel-passport-introspection | 0.86 | Laravel Passport Introspection adds an OAuth2 token introspection endpoint to Laravel Passport, letting resource servers validate access tokens and retrieve token metadata such as scopes, expiry, and client details. | 3 | — | 0 | — | 0 | 8.4 | — | MIT | 7 months ago | |
| n3xt0r/laravel-passport-modern-scopes | 0.85 | Attribute-based OAuth scope enforcement for Laravel Passport. Declare required scopes directly on controllers/actions via PHP 8 attributes, then enforce them with a single middleware. Keeps routes clean and auth rules close to the code they protect. | 0 | 0 | 1 | 672 | 0 | 14.2 | 43.6 | MIT | 6 months ago | |
| n3xt0r/laravel-passport-authorization-core | 0.85 | Core components for building OAuth2 authorization flows with Laravel Passport. Provides reusable helpers and abstractions to standardize consent/approval handling and authorization logic, making it easier to implement custom Passport authorization endpoints and UI. | 1 | 1 | 1 | 827 | 0 | 8.3 | 38.6 | MIT | 7 months ago | |
| n3xt0r/filament-passport-ui | 0.85 | Adds a structured Filament admin UI for Laravel Passport: manage OAuth clients by grant type, personal access tokens, and scopes in one place. Focused on visibility, review, and governance of existing OAuth resources, with no custom tooling or CLI workflows needed. | 11 | 9 | 4 | 1K | 0 | 22.0 | 34.0 | MIT | 1 week ago | |
| claudiodekker/laravel-auth | 0.85 | claudiodekker/laravel-auth provides a ready-to-use authentication layer for Laravel, adding login, registration, password reset, and email verification with sensible defaults and a simple setup. It helps you scaffold secure auth flows quickly without building them from scratch. | 118 | — | 2 | — | 3 | 1.8 | 0.8 | MIT | 3 years ago | |
| laravelcollective/auth | 0.85 | Legacy Laravel Collective authentication scaffolding for Laravel apps, providing login, registration, password reset, routes, controllers, and views to help add session-based user authentication quickly. | 13 | — | 3 | — | 0 | 0.2 | — | NOASSERTION | — | |
| chrisbjr/api-guard | 0.85 | API Guard is a Laravel package for API key authentication. It lets you generate and manage API keys, protect routes with middleware, and authenticate requests via configurable headers or query parameters, with hashed key storage and easy integration. | 691 | 698 | 139 | 136 | 23 | 14.6 | 9.6 | MIT | 10 years ago | |
| overtrue/laravel-passport-cache-client | 0.85 | Caches Laravel Passport access tokens, clients, and scopes in Redis or any cache store, eliminating repeated database queries during authentication. Drop-in service provider with configurable TTL and cache driver, working alongside existing Passport setups. | 15 | 17 | 4 | 189 | 0 | 0.2 | 10.8 | MIT | 4 years ago | |
| happenv-com/laravel-access-control | 0.85 | Role-based access control for Laravel. Define roles and permissions, assign them to users, and guard routes, controllers, and Blade views with simple middleware and helper checks. Lightweight, configurable, and easy to drop into existing apps. | 0 | — | 0 | — | 0 | 19.0 | — | MIT | 1 month ago | |
| barryvdh/laravel-security | 0.85 | barryvdh/laravel-security provides security-focused helpers and middleware for Laravel applications, making it easier to apply common protections and safer defaults with minimal configuration. A lightweight option for adding basic hardening to projects without replacing Laravel's built-in security f... | 52 | 53 | 20 | 1 | 2 | 1.3 | 0.1 | — | — | |
| juststeveking/http-auth-strategies | 0.85 | A Laravel package offering reusable authentication strategy classes for HTTP requests, letting you encapsulate and swap Basic, Bearer, and custom auth schemes cleanly instead of scattering credentials through your code. | 8 | 8 | 1 | 103 | 0 | 0.4 | 15.1 | MIT | 5 years ago | |
| michalkortas/laravel-indexable | 0.85 | — | 1 | 1 | 0 | 1 | 0 | 8.1 | 2.4 | — | 3 years ago | |
| directorytree/authorization | 0.85 | An easy, native role and permission management system for Laravel. Assign roles and permissions to your models, check abilities, cache lookups, and protect routes with built-in middleware. | 179 | 179 | 9 | 209 | 2 | 11.2 | 5.3 | MIT | 7 months ago | |
| edgrosvenor/tupleauth | 0.85 | TupleAuth adds tuple-based, relationship-driven authorization to Laravel. Define access as subject-relation-object tuples, then check permissions through familiar Gates and Blade directives without building complex role hierarchies. | 1 | — | 0 | — | 0 | 0.2 | — | MIT | 7 years ago | |
| maxiviper117/laravel-access | 0.85 | A Laravel package for managing user access and permissions with a simple API, helping you define abilities and control authorization across your application. | 0 | — | 0 | — | 1 | 20.4 | — | MIT | 5 days ago | |
| joselfonseca/lighthouse-graphql-passport-auth | 0.85 | Adds Laravel Passport authentication to Lighthouse GraphQL APIs, with register, login, refresh, logout, and current-user mutations plus configurable guards and token handling for securing GraphQL endpoints. | 229 | 231 | 58 | 8K | 0 | 18.4 | 24.3 | MIT | 3 months ago | |
| michael-rubel/laravel-safe-request | 0.85 | A Laravel package for safer request handling: define validation rules and access only validated input, keeping unvalidated fields out of controllers and services. It helps reduce mass-assignment and untrusted-data risks while keeping form requests simple. | 13 | 13 | 0 | 0 | 0 | 0.2 | — | MIT | 3 years ago |
How can I help you explore Laravel packages today?