yorvoid / intent-verifier
YorvoID's intent verifier: runs a privileged operation only after a passkey signed exactly that operation, checked against keys the verifier holds itself. Stands alone: no framework, no database layer.
Requires
- php: >=8.5
- ext-mbstring: *
- psr/clock: ^1.0
- spomky-labs/cbor-php: ^3.4
- symfony/serializer: ^8.1
- symfony/uid: ^8.1
- twig/twig: ^3.30
- web-auth/webauthn-lib: ^5.3.9
Requires (Dev)
None
Suggests
None
Provides
None
Conflicts
None
Replaces
None
This package is auto-updated.
Last update: 2026-11-04 22:41:09 UTC
README
YorvoID's intent verifier: runs a privileged operation only after a passkey signed exactly that operation, checked against keys the verifier holds itself. Stands alone: no framework, no database layer. Part of YorvoID, identity and access management for PHP.
composer require yorvoid/intent-verifier
It stands alone: install it where the privileged operations run, next to no other YorvoID package. Read Signed intents, and the rest of the documentation.
Read-only
This package is developed in yorvoid/yorvoid, in packages/intent-verifier; its own repository is a read-only copy. Please open issues and pull requests in yorvoid/yorvoid, and report vulnerabilities privately as the security policy describes.
License
Licensed under the Apache License 2.0; see also NOTICE.