Download the PHP package vkoori/laravel-stateless-auth without Composer
On this page you can find all versions of the php package vkoori/laravel-stateless-auth. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-stateless-auth
JwtAuth for Laravel
A fully stateless JWT authentication guard and provider for Laravel.
Supports access/refresh tokens, automatic cookie injection, multi-source token parsing (header, query, cookie), and token revocation.
✨ Features
- 🔐 Custom Laravel guard + provider (fully stateless)
- ♻️ Refresh token support
- 🍪 Cookie-based tokens (HttpOnly, optional)
- 📩 Header / Query string token support
- 🔄 Token revocation
- 💡 Simple trait-based token issuing
- ⚡️ Octane-ready
📦 Installation
⚙️ Configuration
Publish the config file:
This will publish config/jwt-guard.php.
also read optionally
🛡 Register the Guard & Provider
In your config/auth.php:
👤 Token Support on User Model
Your User model must use the provided trait:
🧩 Custom Cache Driver for JWT Token Storage
To prevent JWT tokens from being removed during global cache clears (php artisan cache:clear), you can isolate token storage using a custom cache store.
🔧 Configuration
Use one of the existing cache stores, or define a dedicated store for JWT.
-
Add a new cache store in
config/cache.php: -
Define a dedicated Redis connection in
config/database.php: - Set the custom driver on your
Authenticatablemodel using theHasApiTokenstrait:
💡 Why This Matters
By using a dedicated Redis cache store for JWT tokens:
- php artisan cache:clear won’t wipe out active tokens
- You can still manually clear tokens when needed:
This is especially useful when enable_revoke is set to true in your config, ensuring users are logged out securely while preserving system-wide cache stability.
🔐 JWT Scope Middleware
This package includes a built-in JwtScopeMiddleware to restrict route access based on scopes defined in the JWT token payload.
🔧 Middleware Registration
✅ Laravel 12+
In Laravel 12+, middleware is registered using the bootstrap/app.php:
🧱 Laravel 11 and below
If you're using Laravel 11 or older, register the middleware in app/Http/Kernel.php:
✅ Defining Scopes in Your JWT
Make sure you include the scope claim when generating your access tokens. Example:
🔒 Protect Routes Using Scope Middleware
You can pass multiple allowed scopes or single scope, and access will be granted if at least one matches:
⚠️ Error Handling
- If the user is unauthenticated, a 401 Unauthorized will be thrown.
- If the token lacks the required scopes, a 403 Forbidden (ScopeException) will be raised.
