PHP download

Download the PHP package juniorfontenele/laravel-vault-server without Composer

On this page you can find all versions of the php package juniorfontenele/laravel-vault-server. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download juniorfontenele/laravel-vault-server
More information about juniorfontenele/laravel-vault-server
Files in juniorfontenele/laravel-vault-server

Vendor juniorfontenele
Package laravel-vault-server
Short Description A vault server for Laravel applications.
License MIT
Homepage https://github.com/juniorfontenele/laravel-vault-server

Keywords vault juniorfontenele laravel-vault-server vault server

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Example code of juniorfontenele/laravel-vault-server

Informations about the package laravel-vault-server

Laravel Vault Server

A comprehensive vault server package for Laravel applications that provides secure credential storage, JWT-based authentication with asymmetric keys, and cryptographic key management. Built with security-first principles, this package offers hash storage with salt + pepper, client management, and automatic key rotation capabilities.

Features

Secure Hash Storage: Store hashes with salt + pepper for enhanced security
JWT Authentication: Asymmetric key-based JWT authentication system
Client Management: Create, provision, and manage vault clients
Key Pair Management: Generate, rotate, and revoke cryptographic key pairs
Automatic Cleanup: Built-in cleanup for expired and revoked keys

Installation

You can install the package via composer:

After installation, run the install command to set up the package:

This command will:

Publish the migration files
Optionally run the migrations

Configuration

Publish the configuration file (optional):

Usage

Using Facades

The package provides several facades for easy access to vault functionality:

VaultAuth Facade

JWT authentication service for client authentication and authorization.

VaultClientManager Facade

Client management service for creating, provisioning, and managing vault clients.

VaultHash Facade

Secure password storage and validation service using salt + pepper hashing.

VaultKey Facade

Cryptographic key pair management service for JWT signing and verification.

Using Artisan Commands

The package provides several Artisan commands for managing clients and keys:

Client Management Commands

Commands for managing vault clients through the command line.

Key Management Commands

Commands for managing cryptographic key pairs.

Events

The package dispatches various events that you can listen to for auditing and monitoring:

Client Events

ClientCreated - When a new client is created
ClientDeleted - When a client is deleted
ClientProvisioned - When a client is provisioned
ClientTokenGenerated - When a JWT token is generated for a client
InactiveClientsCleanup - When inactive clients are cleaned up

Hash Events

HashStored - When a hash is stored
HashVerified - When a hash is verified
HashDeleted - When a hash is deleted
RehashNeeded - When a hash needs to be rehashed

Key Events

KeyCreated - When a new key pair is created
KeyRetrieved - When a key is retrieved
KeyRevoked - When a key is revoked
KeyRotated - When a key is rotated
ExpiredKeysCleanedUp - When expired keys are cleaned up
RevokedKeysCleanedUp - When revoked keys are cleaned up

Pepper Events

PepperRotated - When the pepper is rotated
PepperDecryptionFailed - When pepper decryption fails

Example Event Listener

API Routes

The package automatically registers API routes for vault operations. By default, routes are registered under the /vault prefix. You can access:

POST /vault/client/{clientId}/provision - Provision a client
POST /vault/password/{userId} - Securely store a password
POST /vault/password/{userId}/verify - Verify a password
DELETE /vault/password/{userId} - Delete a password
POST /vault/kms/rotate - Rotate client key pair
GET /vault/kms/{kid} - Get key by ID

Middleware

The package includes JWT validation middleware that you can use to protect your routes:

Testing

Run tests with coverage:

Code Quality

The package includes several code quality tools:

Security

This package implements several security best practices:

Asymmetric JWT: Uses RSA keys for JWT signing and verification
Salt + Pepper: Hashes are stored with both salt and pepper for enhanced security
Key Rotation: Supports automatic key rotation and cleanup
Scope-based Access: Client access is controlled via scopes
Audit Trail: Comprehensive event system for monitoring

Changelog

Please see CHANGELOG for more information on what has changed recently.

Contributing

Please see CONTRIBUTING for details.

Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

Credits

Junior Fontenele
All Contributors

License

The MIT License (MIT). Please see License File for more information.

All versions of laravel-vault-server with dependencies

PHP Build Version

Package Version

Version 1.0.0 Release 05. Jun 2025
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of laravel-vault-server from vendor juniorfontenele

Requires php Version ^8.3
illuminate/support Version ^12
juniorfontenele/laravel-secure-jwt Version ^1.0
phpseclib/phpseclib Version ^3.0

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package juniorfontenele/laravel-vault-server contains the following files

Loading the files please wait ...