kinetis/auth

Bearer/opaque-token authentication middleware for Kinetis, built entirely on interfaces core already requires (PSR-7/PSR-15). See kinetis/auth-jwt for stateless JWT verification instead.

v1.0.3 2026-08-16 08:56 UTC

Requires

• php: ^8.4
• kinetis/framework: ^1.6
• nyholm/psr7: ^1.8
• psr/http-message: ^2.0
• psr/http-server-middleware: ^1.0

Requires (Dev)

• infection/infection: ^0.34.2
• phpstan/phpstan: ^2.2
• phpunit/phpunit: ^11.0
• vimeo/psalm: ^6.16

MIT

• Alon Noy

Published on Packagist.org on 2026-08-16 08:56 UTC

README

kinetis/auth
Bearer/opaque-token authentication middleware for Kinetis

A PSR-15 route middleware that validates an Authorization: Bearer <token> header and registers the resolved user on the current request as CurrentUserInterface, plus a token generator. Storage is entirely up to you — the package has no opinion on where tokens live.

use Kinetis\Http\Attributes\Get;
use Kinetis\Http\Attributes\Middleware;
use Kinetis\Http\CurrentUserInterface;
use Kinetis\Auth\BearerAuthMiddleware;

#[Middleware(BearerAuthMiddleware::class)]
final readonly class OrderController
{
    public function __construct(
        private CurrentUserInterface $user,
    ) {}

    #[Get('/orders')]
    public function index(): array
    {
        return ['userId' => $this->user->id()];
    }
}

Need stateless JWT verification instead of your own token storage? See kinetis/auth-jwt.

Installation

composer require kinetis/auth

Requires PHP 8.4+ and kinetis/framework. Full documentation: docs.kinetis.dev/auth.html.

License

MIT — see LICENSE.