Download the PHP package nawasara/vault without Composer

Nawasara Vault

Encrypted credential management for the Nawasara superapp framework. Every service package (Cloudflare, WHM, Keycloak, SMTP, etc.) reads its credentials from this single place at runtime, rotates without redeploy, and gets a complete access log for audit.

Features

• Service groups — declarative group-of-fields registration via config/nawasara-vault.php. Each service contributes its own group with the fields it needs (host, token, password, etc.)
• Multi-instance — flag multi_instance => true on a group to manage many credential sets per service (e.g. multiple WHM servers, multiple Cloudflare accounts)
• Optional fields — optional => true on a field exempts it from the "complete" check so the group can still be marked configured without it
• Field types — text, password, select, textarea (multi-line for PEM keys, etc.)
• Encryption at rest — values stored encrypted via Laravel's built-in encrypter, decrypted on read
• Access log — every read / write / delete of a credential is recorded with user, action, and timestamp
• One-click test connection — declare 'test' => Service@method on a group; the credential dropdown shows a Test Connection button that calls your handler and surfaces the result as a toast

Installation

Auto-discovered. The Vault facade is registered as an alias.

Declaring a service group

Reading credentials at runtime

Test connection contract

A group's test handler receives ?string $instance = null and should return:

The credential UI calls the handler and shows the message as a green/red toast.

Pages

Permissions

Author

Pringgo J. Saputro <[email protected]>

License

MIT