n3xt0r/laravel-passport-authorization-core
Core components for building OAuth2 authorization flows with Laravel Passport. Provides reusable helpers and abstractions to standardize consent/approval handling and authorization logic, making it easier to implement custom Passport authorization endpoints and UI.
Full Changelog: https://github.com/N3XT0R/laravel-passport-authorization-core/compare/1.2.4...1.3.0
This release brings a major step forward in how authorization is understood, managed, and audited.
The focus is on clarity, safety, and transparency – especially in environments where users or service accounts act on behalf of different OAuth clients.
Permissions are now explicitly tied to the OAuth client they belong to.
Instead of implicitly assuming where a permission applies, the system now clearly answers:
Who can do what – and in which client context?
This makes permission setups:
Authorization decisions are now based on a single, well-defined context:
This removes hidden assumptions and ensures all permission checks rely on the same validated source of truth.
Whenever permissions change, the system now emits clear domain events:
This makes authorization changes visible, traceable, and ready for:
Authorization management is now exposed through explicit application use cases instead of low-level storage access.
What this means:
Read-only use cases make it possible to inspect clients, permissions, and grants without touching internal data structures.
When the ownership of an OAuth client changes, all permissions of the previous owner are now automatically cleaned up.
This prevents:
resource.read instead of resource:read).✨ Result:
Authorization is now more explicit, more understandable, and much harder to misconfigure – whether you’re a developer, an administrator, or someone reviewing access rights.
Full Changelog: https://github.com/N3XT0R/laravel-passport-authorization-core/compare/1.1.0...1.2.0
How can I help you explore Laravel packages today?