Product Decisions This Supports

Build vs Buy: Avoids reinventing auth middleware from scratch, reducing engineering effort and security risks associated with custom implementations. Ideal for Spiral-based projects where maintaining a lightweight, framework-integrated solution is preferable to third-party libraries.
Roadmap Alignment: Enables rapid implementation of multi-client authentication (web, mobile, API) and supports future scaling for features like JWT, OAuth2, or RBAC without disrupting core business logic.
Use Cases: Critical for SaaS products needing consistent auth across endpoints (e.g., session-based user sessions, API token validation), and scenarios requiring separation of transport-layer concerns (headers/cookies) from domain-specific authorization rules.

When to Consider This Package

Adopt when: Building a Spiral Framework application, needing a standardized HTTP auth pipeline with pluggable guards (e.g., JWT, cookie-based), and prioritizing minimal boilerplate code. Ideal for teams already invested in Spiral’s ecosystem and seeking quick integration of auth checks into middleware.
Look elsewhere when: Using a non-Spiral framework (e.g., Laravel, Symfony), requiring modern OAuth2 server capabilities, or if the package’s lack of recent updates (last release 2020) raises concerns about security patches or compatibility with newer PHP versions. Verify if the main Spiral Framework’s built-in auth system is actively maintained before relying on this standalone split.

Executives: “This package accelerates secure authentication rollout by leveraging Spiral’s proven infrastructure, cutting development time by