Libraries tagged by invocation

Library to query HTTPS Certificates revocation status using the Online Certificate Status Protocol (OCSP) and to make a request to a Timestamp authority (TSA)

Go to Download

Defensive, framework-neutral Sign in with Apple for PHP: OAuth flow, token verification, revocation, and notifications.

Go to Download

OpenID Connect Server for Laravel Passport — adds OIDC Discovery, JWKS, UserInfo, Token Introspection, Token Revocation, and RP-Initiated Logout.

Go to Download

Missing OpenSSL function on PHP to create CRL (certificate revocation list) for CA

Go to Download

get assets versions easily

Go to Download

Library implement an Online Certificate Status Protocol (OCSP) responder

Go to Download

Framework-agnostic, offline license core: mint and verify compact Ed25519-signed license artifacts (EdDSA JWTs) with entitlements, limits, deployment/domain binding, grace windows and signed revocation lists. The shared leaf both a billing issuer and a self-hosted verifier depend on.

Go to Download

Magento 2 EU Withdrawal Button Module - Adds a withdrawal/revocation button for orders in compliance with EU Directive (EU) 2023/2673

Go to Download

Opaque, rotating refresh tokens and device sessions for Laravel — SHA-256 at rest, atomic anti-double-spend rotation, family revocation on reuse. Zero third-party runtime deps.

Go to Download

Privacy-conscious session inventory and revocation.

Go to Download

API token, scope, version, rate-limit, idempotency, and revocation policy.

Go to Download

Stateless JWT authentication middleware for Kinetis (HS256/RS256, optional per-token revocation), verifying signed tokens via firebase/php-jwt. See kinetis/auth instead for opaque Bearer-token validation against your own storage.

Go to Download

Brand-scoped entitlement grants for Statamic: one state machine, database-level idempotency, real revocation and four domain events. Decides who may access what; sends nothing.

Go to Download

Omniauth's one-time passwords over spomky-labs/otphp, under any PHP host - authenticator applications (TOTP; HOTP possible): the second factor, its enrolment (a secret and its otpauth:// address) and its revocation, with scheb/2fa's parameters (SHA1, 30 s, 6 digits, the same leeway and provisioning address) so the secrets an application keeps today go on working, a code accepted once only, and the secrets sealed at rest with libsodium (SodiumSecretBox, the key in the host's vault; the ones kept in clear read until rewritten). Formerly omniauth/totp, which it replaces (the Omniauth\Totp\ names stay aliases for one release).

Go to Download

Minimal-dependency JWT auth for first-party Laravel apps (unofficial; not affiliated with the Laravel team): short access tokens, opaque rotating refresh tokens, reuse detection, grace window, and instant denylist revocation.

Go to Download