derafu / auth
Derafu: Auth - Authentication and Authorization
dev-main
2026-10-25 00:30 UTC
Requires
- php: ^8.5
- derafu/array: dev-main
- derafu/form: dev-main
- derafu/renderer: dev-main
- derafu/routing: dev-main
- derafu/support: dev-main
- derafu/translation: dev-main
- derafu/twig-components: dev-main
- derafu/value: dev-main
- laminas/laminas-diactoros: ^3.9
- mezzio/mezzio-authentication: ^1.13
- mezzio/mezzio-authorization: ^1.11
- mezzio/mezzio-flash: ^1.10
- mezzio/mezzio-session: ^1.17
- psr/cache: ^3.0
- psr/http-client: ^1.0
- psr/http-factory: ^1.1
- psr/http-message: ^2.0
- psr/http-server-handler: ^1.0
- psr/http-server-middleware: ^1.0
Requires (Dev)
- ext-xdebug: *
- altcha-org/altcha: ^2.3
- derafu/captcha: dev-main
- derafu/csrf: dev-main
- derafu/data-processor: dev-main
- firebase/php-jwt: ^7.2
- friendsofphp/php-cs-fixer: ^3.95
- guzzlehttp/guzzle: ^7.16
- league/oauth2-client: ^2.9
- mezzio/mezzio-session-ext: ^1.21
- nikic/php-parser: ^5.9
- phpstan/phpstan: ^2.3
- phpunit/phpunit: ^13.4
- symfony/cache: ^8.1
- symfony/config: ^8.1
- symfony/dependency-injection: ^8.1
- symfony/yaml: ^8.1
Suggests
- derafu/captcha: The captcha providers (hCaptcha, Turnstile, reCAPTCHA v3 and ALTCHA), which the login form of the database provider needs: it is protected with a captcha, and a form that is protected can not be rendered without one.
- derafu/csrf: A CSRF token manager over the session of Mezzio, which the login form of the database provider needs (its form is protected with a CSRF token).
- derafu/session: The services of the session and of the flash messages of Mezzio (the middlewares and the variables SESSION_*), which the application needs in its pipeline before the authentication.
- firebase/php-jwt: Required by the Keycloak provider (Derafu\Auth\Provider\Keycloak\KeycloakTokenVerifier verifies the tokens with it). The database provider does not need it.
- league/oauth2-client: Required by the Keycloak provider (OAuth2 authorization code flow). It brings guzzlehttp/guzzle, which the provider uses to read the keys of the realm.
- nikic/php-parser: Required by the tests of the messages of the package (Derafu\Translation\Lint reads the code).
- symfony/cache: A PSR-6 cache pool (any other works) for the keys of the realm of the Keycloak provider (Psr\Cache\CacheItemPoolInterface): without it they are read in every request that verifies a token.
Provides
None
Conflicts
None
Replaces
None
This package is auto-updated.
Last update: 2026-10-25 00:31:09 UTC