Download the PHP package edituraedu/php-dbsc without Composer
On this page you can find all versions of the php package edituraedu/php-dbsc. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download edituraedu/php-dbsc
More information about edituraedu/php-dbsc
Files in edituraedu/php-dbsc
Package php-dbsc
Short Description Preliminary implementation of Device Bound Session Credential standard for PHP 8.4+
License MIT
Informations about the package php-dbsc
php-dbsc
Experimental PHP implementation of Device Bound Session Credentials (DBSC).
Status
This package is completely experimental.
Do not treat it as production-ready security infrastructure yet. APIs, behavior, and defaults may change quickly.
Requirements
- PHP 8.4+
firebase/php-jwt(installed automatically via Composer)
Installation
What It Provides
EdituraEDU\\DBSC\\DBSCsingleton for DBSC flow handling- Start header emission (
Secure-Session-Registration) - Start endpoint verification (
Secure-Session-Response) - Refresh challenge/verification handling (
Secure-Session-Challenge,Sec-Secure-Session-Id) - Cookie + session guard enforcement
- Optional dependency injection for:
IDBSCLoggerIDBSCInvalidationHandler
Quick Start
Start Endpoint
Refresh Endpoint
Config
The package reads JSON config via DBSCConfig::LoadFromFile(...).
Start from src/DBSCConfig.json and adjust domains, paths, cookie flags, and endpoint paths for your environment.
Optional Logger / Invalidation Handler
DBSC::Initialize(...) accepts optional custom implementations:
IDBSCLoggerfor structured loggingIDBSCInvalidationHandlerfor custom cleanup when DBSC invalidates a session
If no logger is passed, DBSCLogger is used by default.
Notes
- Header normalization currently tolerates both raw and quoted DBSC header values for compatibility.
- This project is under active iteration, feedback and contributions are welcome!
License
MIT