Download the PHP package semitexa/authorization without Composer
On this page you can find all versions of the php package semitexa/authorization. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download semitexa/authorization
More information about semitexa/authorization
Files in semitexa/authorization
Package authorization
Short Description Semitexa Authorization - policy-based access checks, guards, and permission evaluation
License MIT
Informations about the package authorization
Semitexa Authorization
Policy-based access control with capability and permission guards and payload-level enforcement.
Purpose
Evaluates access policies on every guarded request. Resolves merged policies from class hierarchy, checks capabilities and permissions against the authenticated subject, and blocks unauthorized access at the pipeline level.
Install
Included in every project created by the installer (https://semitexa.com/install.sh).
Role in Semitexa
Depends on semitexa/core and semitexa/auth. Used by semitexa/rbac and platform packages. Provides the enforcement layer that RBAC and other grant resolvers plug into.
Key Features
#[AsProtectedPayload](authenticated route) and#[AsServicePayload](machine route) payload attributes; public routes use#[AsPublicPayload]from core#[RequiresCapability]and#[RequiresPermission]attributesPayloadAccessPolicyResolvermerging policies from class hierarchyAuthorizationListenerguarding handler execution with 403 on failurebin/semitexa lint:accesschecking the access attributes of every route payload at once (ai:verifyruns it); at runtime a route's metadata is checked on its first requestAuthenticatedSubjectandGuestSubjecttypes- Extensible via
SubjectGrantResolverInterface(implemented by RBAC)
Notes
Authorization uses a SubjectGrantResolverInterface to resolve the authenticated subject's grants when an Authorizer is registered. If no SubjectGrantResolverInterface is available, capability and permission requirements fail closed. If no Authorizer is registered at all, the pipeline falls back to public-vs-protected endpoint handling only and skips grant evaluation.
All versions of authorization with dependencies
semitexa/core Version >=2026.10.08.0620 || dev-master
semitexa/auth Version *