Search by 
sugarcommerce/signed-tokens dependents (3) Order by: downloads | none Show: all | require | require-dev
-
PHP
sugarcommerce/github
The GitHub calls for selling access to private repositories: a GitHub App's RS256 JWT and installation tokens, user sign-in with PKCE that handles GitHub's 200-with-an-error answer, and collaborator invitations kept by numeric id rather than by a login that can be renamed.
-
PHP
sugarcommerce/oauth
The two halves of an OAuth 2.0 authorization-code round trip that providers leave to you: a PKCE pair (RFC 7636, S256) and a signed state bound to a cookie in the browser that started the trip, so a callback is only honoured where it began.
-
PHP
sugarcommerce/web-security
Signed-cookie sessions for a single shared password, CSRF tokens with nothing to store, and keyed hashing for the values an application must compare but never read back.