waaseyaa/auth

Headless authentication for Waaseyaa — login, registration, 2FA, password reset

v0.1.0-alpha.175 2026-05-01 17:17 UTC

Requires

• php: >=8.4
• waaseyaa/foundation: ^0.1.0-alpha.150
• waaseyaa/mail: ^0.1.0-alpha.150
• waaseyaa/user: ^0.1.0-alpha.150

Requires (Dev)

• phpunit/phpunit: ^10.5

GPL-2.0-or-later

README

Layer 1 — Core Data

Headless authentication for Waaseyaa: login, registration, 2FA, password reset.

Owns AuthManager for credential verification and session establishment, TwoFactorManager for TOTP enrollment and verification, RateLimiterInterface plus DatabaseRateLimiter for per-account throttling, and the controller surface for password-reset and email-verification flows. Route registration for /api/auth/* lives in Waaseyaa\Routing\AuthOidcRouteServiceProvider so this package stays free of L4 routing imports.

Key classes: AuthManager, AuthServiceProvider, TwoFactorManager, RateLimiterInterface, DatabaseRateLimiter.