Download the PHP package componenta/auth-token without Composer
On this page you can find all versions of the php package componenta/auth-token. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download componenta/auth-token
More information about componenta/auth-token
Files in componenta/auth-token
Download componenta/auth-token
More information about componenta/auth-token
Files in componenta/auth-token
Vendor componenta
Package auth-token
Short Description Purpose-separated one-time bearer tokens for Componenta authentication flows
License MIT
Package auth-token
Short Description Purpose-separated one-time bearer tokens for Componenta authentication flows
License MIT
Please rate this library. Is it a good library?
Informations about the package auth-token
Componenta Auth Token
Purpose-separated, single-use bearer tokens for authentication flows.
The package is a reusable primitive for magic links, password reset and similar one-time flows. It deliberately keeps one active token per subject and purpose.
Security properties:
- credentials contain 32 CSPRNG bytes encoded as unpadded base64url;
- raw credentials are never persisted;
- persisted lookup values are SHA-256 hashes domain-separated by purpose;
- replacement is atomic on the unique
(subject_uuid, purpose)key; - consumption is atomic and single-use;
- purpose is part of lookup/consume, so a token issued for one flow cannot be accepted by another flow.
All versions of auth-token with dependencies
PHP Build Version
Package Version
Requires
php Version
^8.4
componenta/identity Version ^1.0.1
cycle/database Version ^2.22
psr/clock Version ^1.0
componenta/identity Version ^1.0.1
cycle/database Version ^2.22
psr/clock Version ^1.0
The package componenta/auth-token contains the following files
Loading the files please wait ...