Libraries tagged by token-rotation

Refresh tokens for Laravel Sanctum with token families, rotation and reuse detection.

Go to Download

Vortos authentication — JWT, Argon2id, token rotation, built-in controllers

Go to Download

Modern PHP client for Basecamp 4 (BC3 API) — OAuth 2.0 with refresh-token rotation

Go to Download

Opaque rotating refresh tokens (RFC 9700 model): rotation, reuse detection, family revocation, sender binding.

Go to Download

Webman JWT plugin using lcobucci/jwt v5 with multi-guard, SSO, blacklist, token rotation, and extensibility.

Go to Download

Device/session registry for Laravel Rebel: session/device tracking, logout-everywhere, refresh-token rotation with reuse detection, and device trust. Part of padosoft/laravel-rebel-*.

Go to Download

Drop-in, config-driven authentication library for Laravel 12 and 13. Registration with OTP + magic-link email verification, login, refresh token rotation, password reset, multi-session management, device fingerprinting, Google OAuth, long-lived API tokens, account status workflow, and referral codes with anti-abuse detection — all through a single JSON API.

Go to Download

Laravel JWT implementation with refresh token rotation

Go to Download

The authorization-server half of OAuth 2.1 for a remote MCP server: protected resource and authorization server metadata, Client ID Metadata Documents and dynamic registration, authorization code with S256 PKCE, resource-bound opaque tokens, rotating refresh tokens with reuse detection, and revocation. Storage is yours.

Go to Download