PHPackages                             amtgard/ork-iam - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. amtgard/ork-iam

ActiveLibrary[Authentication & Authorization](/categories/authentication)

amtgard/ork-iam
===============

Amtgard ORK IAM

v1.0.2(1mo ago)05MITPHPPHP ^8.3

Since Sep 23Pushed 1mo agoCompare

[ Source](https://github.com/amtgard/ork-iam)[ Packagist](https://packagist.org/packages/amtgard/ork-iam)[ Docs](https://github.com/amtgard/active-record-orm)[ RSS](/packages/amtgard-ork-iam/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (3)Dependencies (10)Versions (6)Used By (0)

ork-iam
=======

[](#ork-iam)

IAM Implementation for ORNs

Design
------

[](#design)

Installation
------------

[](#installation)

```
composer require amtgard/ork-iam
```

Requirements:

- PHP ^8.3
- ext-json

For local development:

```
composer install
```

Introduction
------------

[](#introduction)

ORK IAM is a policy document system that allows for testing `claims` against `requirements`. `claims` may be bundled into `policies`. If any claim in a policy is accepted by the requirement on a given object, then the policy is accepted by the requirement; otherwise, it is rejected.

A claim and a policy are not self-enforcing, in the sense that any validly constructed claim can be compared to a requirement; it is up to the system making the comparison to validate that the given claim originated from a trusted source.

A typical method of doing this would be a cryptographic signature of the policy from the trusted source, or a cryptographic signature of an envelope containing the policy, such as embedding the policy in a JWT.

Usage
-----

[](#usage)

Basic example showing how to parse an ORN into a Claim, define a Requirement, and evaluate it. Also shows simple `Resource` usage.

*Single Claim*

```