Download the PHP package nawasara/vault without Composer

Nawasara Vault

Encrypted credential management for the Nawasara superapp framework. Every service package (Cloudflare, WHM, Keycloak, SMTP, and so on) reads its credentials from this single place at runtime, rotates them without a redeploy, and gets a full access log for audit.

Features

• Service groups: declarative group-of-fields registration via config/nawasara-vault.php. Each service contributes its own group with the fields it needs (host, token, password, etc.)
• Multi-instance: set multi_instance => true on a group to manage many credential sets per service, such as multiple WHM servers or multiple Cloudflare accounts
• Optional fields: optional => true on a field exempts it from the "complete" check, so the group can still be marked configured without it
• Field types: text, password, select, textarea (multi-line, useful for PEM keys)
• Encryption at rest: values are stored encrypted via Laravel's built-in encrypter and decrypted on read
• Access log: every read, write, or delete of a credential is recorded with user, action, and timestamp
• One-click test connection: declare 'test' => Service@method on a group and the credential dropdown shows a Test Connection button that calls your handler and surfaces the result as a toast

Installation

Auto-discovered. The Vault facade is registered as an alias.

Declaring a service group

Reading credentials at runtime

Test connection contract

A group's test handler receives ?string $instance = null and should return:

The credential UI calls the handler and shows the message as a green or red toast.

Pages

Permissions

Author

Pringgo J. Saputro <[email protected]>

License

MIT