kipchak / middleware-auth-jwks

1.33 2026-10-07 11:17 UTC

Requires

• firebase/php-jwt: ^7
• kipchak/core: ^2 || ^3
• kipchak/driver-config: ^1
• kipchak/driver-filecache: ^1
• kipchak/driver-logger: ^1

Requires (Dev)

• phpunit/phpunit: ^12

MIT

• http
• apis
• microservices
• Mamluk

Published on Packagist.org on 2026-10-07 11:17 UTC

README

This Middleware package provides OAuth 2.0 JWT Bearer Token Authentication support for Kipchak APIs using JWKS.

Composer Package

kipchak/middleware-auth-jwks

How to use it?

Install it via composer: composer require kipchak/middleware-auth-jwks.

Then just ensure you have appropriate settings configured in kipchak.auth.jwks.php config file in the root of your project.

For a sample, please see: https://1x.ax/mamluk/kipchak/starter/~files/master/config/kipchak.auth.jwks.php.

The verified token

Every request the middleware lets through carries the verified token's claims as the kipchak.auth.token request attribute (AuthJWKS::ATTRIBUTE_TOKEN). Requests on ignored paths do not. The token is also still stored in the container under token for compatibility; in FrankenPHP worker mode that entry outlives the request, so prefer the attribute. Usage Metering and Subashi Pro quotas read it through kipchak/identity.

Tests

composer install
./vendor/bin/phpunit

What is a Kipchak Middleware?

Kipchak Middleware is a standard PHP PSR-15 middleware.

Middleware is a component that sits between the request and response of a web application, allowing for interception and modification of the request and response data. In the context of Kipchak, middleware can be used to handle errors, authentication, and other cross-cutting concerns that are common across one or more API endpoints.