ausus / auth-bridge
AUSUS — Laravel-bridge Authorization plugin (RFC-014). Skeleton: name reserved; V0 uses ausus/kernel's StubActor directly.
0.1.0
2026-05-19 10:17 UTC
Requires
- php: >=8.3
README
Authorization plugin satisfying RFC-014 in two modes.
Owned RFC surfaces
- RFC-014 — Actor, ActorRef, ActorResolver contract.
- Includes the canonical
roleHashalgorithm of RFC-014 §3 (locked test vectors per §3.6). - Built-in
RoleRequired/PermissionRequired/RolesRequiredPolicies of RFC-011 §8.3 live here (consumed by the DSL via theAusus\facade re-export).
Modes
| Mode | When | Source |
|---|---|---|
stub |
AUSUS_AUTH_MODE=stub (default in development) |
Hardcoded users in config/ausus-auth-stub.php + CLI commands |
laravel |
AUSUS_AUTH_MODE=laravel (default in production) |
Wraps Auth::user(); roles from Spatie\Permission OR roles model attribute OR custom resolver |
Stub-mode CLI
php artisan auth:stub:create <username> --tenant=<id> --roles=<csv>
php artisan auth:stub:list
php artisan auth:stub:delete <username>
Production safety
AUSUS_AUTH_MODE=stub is rejected at boot in production unless AUSUS_AUTH_STUB_FORCE_PROD=true is set (loud override for read-only demos).
Allowed dependencies
ausus/kernelilluminate/auth
Forbidden
- Any other AUSUS package.
- Direct
Auth::user()access from outside the bridge (plugin authors consumeActoronly).