PHP download

Download the PHP package methorz/jwt-auth-middleware without Composer

On this page you can find all versions of the php package methorz/jwt-auth-middleware. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download methorz/jwt-auth-middleware
More information about methorz/jwt-auth-middleware
Files in methorz/jwt-auth-middleware

Vendor methorz
Package jwt-auth-middleware
Short Description PSR-15 JWT authentication middleware with zero-config approach. Supports HS256/RS256, Bearer/custom headers, optional user loading, and scope validation.
License MIT

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Example code of methorz/jwt-auth-middleware

Informations about the package jwt-auth-middleware

JWT Authentication Middleware

PSR-15 JWT authentication middleware with zero-config approach. Just add your JWT secret and you're ready to go!

Features

✅ Zero Configuration - Works out of the box with environment variables
✅ PSR-15 Compliant - Standard middleware interface
✅ Framework Agnostic - Works with any PSR-15 compatible framework
✅ Flexible Token Extraction - Bearer token (default) or custom header
✅ Multiple Algorithms - Supports HS256 (symmetric) and RS256 (asymmetric)
✅ Standard Claims Validation - Validates exp, nbf, iss, aud automatically
✅ Optional User Loading - Inject your own user loader
✅ Optional Scope Validation - Route-level permission checks
✅ Route-Specific Protection - Opt-in authentication per route

Installation

Quick Start

1. Set Environment Variable

2. Add to Your Pipeline

Mezzio:

Slim:

3. Protect Routes

Mezzio:

In Your Handler:

That's it! 🎉

Configuration

Environment Variables (Zero-Config)

Variable	Default	Description
`JWT_SECRET`	-	Secret key for HS256 (required if using symmetric)
`JWT_PUBLIC_KEY_PATH`	-	Path to public key for RS256 (required if using asymmetric)
`JWT_ALGORITHM`	`HS256`	Algorithm: `HS256` or `RS256`
`JWT_ISSUER`	-	Expected `iss` claim (optional)
`JWT_AUDIENCE`	-	Expected `aud` claim (optional)
`JWT_HEADER_NAME`	`Authorization`	Header to extract token from
`JWT_HEADER_PREFIX`	`Bearer`	Token prefix (e.g., "Bearer ")

Advanced Configuration (Optional)

If you need more control, create a configuration file:

Usage Examples

Protect Specific Routes

Scope/Permission Validation

In your token, include a scope claim:

Custom User Loading

Implement UserLoaderInterface to load user from database:

Now $request->getAttribute('user') contains your user object!

Generate Tokens (Separate from Middleware)

Request Attributes

After successful authentication, these attributes are added to the request:

Attribute	Type	Description
`jwt_token`	`Lcobucci\JWT\Token\Plain`	Full parsed token
`jwt_claims`	`Lcobucci\JWT\Token\DataSet`	Token claims
`user`	`object\|null`	Loaded user (if user loader configured)

Exceptions

All exceptions extend MethorZ\JwtAuthMiddleware\Exception\JwtAuthenticationException:

Exception	When Thrown
`MissingTokenException`	No token in request
`InvalidTokenException`	Token is malformed
`ExpiredTokenException`	Token has expired
`InvalidSignatureException`	Signature verification failed
`InsufficientScopeException`	Required scope missing

Recommendation: Use with methorz/http-problem-details to automatically format exceptions as RFC 7807 Problem Details responses.

Testing

Requirements

PHP 8.2 or higher
PSR-15 compatible framework
lcobucci/jwt ^5.4

License

MIT License. See LICENSE for details.

Contributing

Contributions welcome! Please ensure:

All tests pass
Code follows PSR-12
PHPStan level 9 passes
Zero-config principle maintained

All versions of jwt-auth-middleware with dependencies

PHP Build Version

Package Version

Version v1.1.0 Release 21. Dec 2025
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of jwt-auth-middleware from vendor methorz

Requires php Version ^8.2
lcobucci/clock Version ^3.2
lcobucci/jwt Version ^5.4
psr/clock Version ^1.0
psr/container Version ^1.1|^2.0
psr/http-message Version ^1.1|^2.0
psr/http-server-handler Version ^1.0
psr/http-server-middleware Version ^1.0

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package methorz/jwt-auth-middleware contains the following files

Loading the files please wait ...