yorvoid / intent-signing

dev-main / 0.1.x-dev 2026-11-04 20:48 UTC

Requires

• php: >=8.5
• ext-intl: *
• ext-mbstring: *
• psr/clock: ^1.0
• psr/event-dispatcher: ^1.0
• symfony/clock: ^7.4 || ^8.1
• symfony/translation-contracts: ^3.6
• yorvoid/authn: ^0.1
• yorvoid/core: ^0.1
• yorvoid/intent-verifier: ^0.1
• yorvoid/throttle: ^0.1

Suggests

• symfony/translation: Refuses an intent's summary that has no message in the catalogue
• yorvoid/notifications: Tells the person by email when an operation they signed ran

Apache-2.0

• Darko Poposki

• security
• iam
• webauthn
• passkeys
• signed-intents

Published on Packagist.org on 2026-11-05 08:09 UTC

README

YorvoID's side of signed intents in the application, the console: asking for an operation's signature, limits on asking, recording requests and outcomes in the security log, and the summaries the signing page shows. Part of YorvoID, identity and access management for PHP.

composer require yorvoid/intent-signing

Applications usually install yorvoid/symfony, which brings this package along; the privileged side runs yorvoid/intent-verifier. Read Signed intents, and the rest of the documentation.

Read-only

This package is developed in yorvoid/yorvoid, in packages/intent-signing; its own repository is a read-only copy. Please open issues and pull requests in yorvoid/yorvoid, and report vulnerabilities privately as the security policy describes.

License

Licensed under the Apache License 2.0; see also NOTICE.