waaseyaa / auth

v0.1.0-alpha.300 2026-09-02 15:49 UTC

Requires

• php: >=8.5
• waaseyaa/access: ^0.1.0-alpha.300
• waaseyaa/database-legacy: ^0.1.0-alpha.300
• waaseyaa/entity: ^0.1.0-alpha.300
• waaseyaa/foundation: ^0.1.0-alpha.300
• waaseyaa/mail: ^0.1.0-alpha.300
• waaseyaa/user: ^0.1.0-alpha.300

Requires (Dev)

• phpunit/phpunit: ^13.0
• waaseyaa/entity-storage: ^0.1.0-alpha.300
• waaseyaa/testing: ^0.1.0-alpha.300

GPL-2.0-or-later

Published on Packagist.org on 2026-09-02 16:13 UTC

README

Layer 1 — Core Data

Headless authentication for Waaseyaa: login, registration, 2FA, password reset.

Owns AuthManager for credential verification and session establishment, TwoFactorManager for TOTP enrollment and verification, RateLimiterInterface plus DatabaseRateLimiter for per-account throttling, and the controller surface for password-reset and email-verification flows. Route registration for /api/auth/* lives in Waaseyaa\Routing\AuthOidcRouteServiceProvider so this package stays free of L4 routing imports.

Key classes: AuthManager, AuthServiceProvider, TwoFactorManager, RateLimiterInterface, DatabaseRateLimiter.