paragonie/paseto
Reference PHP implementation of PASETO security tokens (v3/v4): safer alternative to JWT/JWE/JWS with modern crypto. Supports local and public tokens, includes PASERK integration for key serialization/wrapping, and works with Sodium (or sodium_compat).
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| kelvinmo/simplejwt | 0.82 | SimpleJWT is a lightweight PHP 8+ library for JWT/JWS/JWE and JWK/COSE keys. Supports HS/RSA/ECDSA/EdDSA signatures, key management (RSA-OAEP, AES-KW, PBES2, ECDH-ES/X25519) and AES-GCM/CBC-HS encryption. | 70 | 70 | 21 | 34K | 0 | 26.4 | 43.1 | NOASSERTION | 1 month ago | |
| web-token/jwt-core | 0.81 | Core JWT component from the web-token JWT Framework. Provides foundational building blocks for JSON Web Tokens used by the framework. Read-only split package; development and issues belong in the main jwt-framework repository. Official docs available online. | 50 | 49 | 7 | 330K | 0 | 0.8 | 52.7 | MIT | 8 years ago | |
| laravel/passport | 0.80 | Laravel Passport provides a full OAuth2 server for Laravel, making API authentication simple with access tokens, personal access tokens, and client credentials. Officially maintained, with extensive docs and integrations for securing first- and third-party APIs. | 3,405 | 3,455 | 803 | 2M | 2 | 61.8 | 45.3 | MIT | 1 month ago | |
| laravel/sanctum | 0.79 | Laravel Sanctum is a lightweight authentication package for Laravel, ideal for SPAs and simple APIs. It supports cookie-based session auth for first-party SPAs and API tokens for personal access tokens, with minimal configuration and Laravel-first integration. | 2,962 | 2,974 | 325 | 6M | 2 | 53.1 | 53.5 | MIT | 1 month ago | |
| lucadegasperi/oauth2-server-laravel | 0.79 | — | 2,349 | 2,404 | 523 | 19K | 0 | 36.0 | 13.5 | MIT | 9 years ago | |
| spatie/laravel-littlegatekeeper | 0.79 | Laravel middleware to password-protect your app with a single, universal username/password set in config. Quickly gate staging, previews, or temporary launches without building a full auth system; publish config and enable the provider to lock down pages. | 191 | 193 | 19 | 1K | 0 | 19.7 | 13.5 | MIT | 3 months ago | |
| friendsofsymfony/oauth2-php | 0.79 | PHP OAuth2 library by FriendsOfSymfony providing client/server building blocks: token and authorization flows, grant types, access token handling, and extensible components for integrating OAuth2 authentication into Symfony and other PHP apps. | 516 | 521 | 111 | 103K | 17 | 11.9 | 9.3 | MIT | 5 years ago | |
| web-token/jwt-framework | 0.78 | — | 949 | 952 | 119 | 548K | 0 | 35.2 | 44.5 | MIT | 1 month ago | |
| beyondbluesky/lib-jwt | 0.78 | libJWT makes JWT tokens easy to encode and decode for OAuth2 authentication workflows. Lightweight PHP library updated for PHP 8.4 (2026-03-28), designed to simplify handling and validating JWTs in your applications. | 1 | 1 | 0 | 5 | 0 | 0.0 | 7.5 | NOASSERTION | — | |
| ecourty/token-bundle | 0.78 | Symfony bundle to manage secure, typed, revocable tokens for any Doctrine entity (password resets, email verification, share links). Supports expiry, single-use/max-uses, JSON payloads, events, subject resolution, and a purge command. | 0 | 0 | 0 | 0 | 0 | 18.8 | — | — | 4 weeks ago | |
| facile-it/php-openid-client | 0.78 | Full-featured PHP OpenID Connect/OAuth2 client with discovery and dynamic client registration. Supports authorization flows, refresh/client credentials grants, userinfo & ID tokens, JWT signing/encryption, request objects, token revocation/introspection, and advanced client auth. | 41 | 42 | 11 | 22K | 4 | 17.4 | 42.9 | — | 5 months ago | |
| chaima409/oauth-server-bundle | 0.78 | — | 0 | 1 | 0 | 0 | 0 | 0.3 | — | — | 6 years ago | |
| php-open-source-saver/jwt-auth | 0.78 | Laravel JWT authentication package (fork of tymondesigns/jwt-auth) maintained by PHP Open Source Saver. Provides the same API with a new namespace, easy migration, and adds new features and ongoing support. Full docs available online. | 838 | 844 | 122 | 409K | 17 | 40.3 | 49.9 | MIT | 1 month ago | |
| mediadotonedev/userauthcenter | 0.78 | — | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| laravel/airlock | 0.78 | Laravel Sanctum (formerly Airlock) provides a lightweight authentication system for Laravel SPAs and simple APIs, offering first-party SPA cookie auth plus API token issuing and management for users, mobile apps, and third-party clients. | 2,962 | 2,962 | 325 | 108 | 2 | 53.1 | 0.7 | MIT | 1 month ago | |
| nikservik/laravel-jwt-auth | 0.78 | — | 0 | 0 | 0 | 0 | 0 | 0.0 | — | — | — | |
| spatie/crypto | 0.76 | Generate RSA key pairs and encrypt/decrypt (and sign/verify) data using private/public keys in PHP. Provides simple wrappers around OpenSSL for better DX, with support for loading keys from files and writing generated keys to disk. | 0 | 485 | — | 20K | — | 20.2 | 24.8 | — | — | |
| dbstudios/veritas | 0.75 | Laravel package for verifying and validating incoming request data and payloads with a consistent rule-based approach. Helps enforce data integrity across APIs and forms, offering a lightweight way to define checks, run assertions, and return clear validation feedback. | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| yethee/tiktoken | 0.75 | PHP port of OpenAI’s tiktoken tokenizer. Get encoders by model name, encode text to token IDs, and cache vocab files for speed. Optional experimental Rust/FFI “lib mode” for faster encoding of medium/large texts. | 162 | 159 | 30 | 260K | 4 | 22.9 | 51.2 | MIT | 2 months ago | |
| n3xt0r/filament-passport-ui | 0.75 | — | 0 | 8 | — | 327 | — | 18.1 | 24.4 | — | — |
How can I help you explore Laravel packages today?