PHPackages aura/session - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. aura/session ActiveLibrary[Security](/categories/security) aura/session ============ Provides session management functionality, including lazy session starting, session segments, next-request-only ("flash") values, and CSRF tools. 6.0.0(2mo ago)2041.2M—9%40[2 issues](https://github.com/auraphp/Aura.Session/issues)[2 PRs](https://github.com/auraphp/Aura.Session/pulls)20MITPHPPHP ^8.1CI passing Since May 9Pushed 1mo ago19 watchersCompare [ Source](https://github.com/auraphp/Aura.Session)[ Packagist](https://packagist.org/packages/aura/session)[ Docs](https://github.com/auraphp/Aura.Session)[ RSS](/packages/aura-session/feed)WikiDiscussions 6.x Synced 1mo ago READMEChangelog (10)Dependencies (2)Versions (18)Used By (20) Aura Session ============ [](#aura-session) Provides session management functionality, including lazy session starting, session segments, next-request-only ("flash") values, and CSRF tools. Foreword -------- [](#foreword) ### Installation [](#installation) This library requires PHP 8.1 or later. It has been tested on PHP 8.1-8.5. We recommend using the latest available version of PHP as a matter of principle. It has no userland dependencies. It is installable and autoloadable via Composer as [aura/session](https://packagist.org/packages/aura/session). ### Quality [](#quality) [![Scrutinizer Code Quality](https://camo.githubusercontent.com/3a13d5a9a432cc8a34b2757a688030ed0e5523e6a386352ac22f97b92daa9488/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f617572617068702f417572612e53657373696f6e2f6261646765732f7175616c6974792d73636f72652e706e673f623d342e78)](https://scrutinizer-ci.com/g/auraphp/Aura.Session/?branch=4.x)[![codecov](https://camo.githubusercontent.com/2bc99410636bf7e049368a7ed434b92c4ce1dacdb8e2da88356f7ad925c48d4d/68747470733a2f2f636f6465636f762e696f2f67682f617572617068702f417572612e53657373696f6e2f6272616e63682f342e782f67726170682f62616467652e737667)](https://codecov.io/gh/auraphp/Aura.Session)[![Continuous Integration](https://github.com/auraphp/Aura.Session/actions/workflows/continuous-integration.yml/badge.svg?branch=4.x)](https://github.com/auraphp/Aura.Session/actions/workflows/continuous-integration.yml) To run the unit tests at the command line, issue `composer install` and then `phpunit` at the package root. This requires [Composer](http://getcomposer.org/) to be available as `composer`, and [PHPUnit](http://phpunit.de/manual/) to be available as `phpunit`. This library attempts to comply with [PSR-1](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-1-basic-coding-standard.md), [PSR-12](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-12-extended-coding-style-guide.md), and [PSR-4](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-4-autoloader.md). If you notice compliance oversights, please send a patch via pull request. ### Community [](#community) To ask questions, provide feedback, or otherwise communicate with the Aura community, please join our [Google Group](http://groups.google.com/group/auraphp) or follow [@auraphp on X](https://x.com/auraphp). Documentation ------------- [](#documentation) This package is fully documented [here](./docs/getting-started.md). ### Health Score 69 — FairBetter than 100% of packages Maintenance87 Actively maintained with recent releases Popularity57 Moderate usage in the ecosystem Community42 Growing community involvement Maturity80 Battle-tested with a long release history Bus Factor2 2 contributors hold 50%+ of commits How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~275 days Recently: every ~159 days Total 18 Last Release 83d ago Major Versions 1.0.2 → 2.0.0-beta12014-08-31 1.x-dev → 3.x-dev2016-04-11 2.x-dev → 4.0.0-beta12023-09-23 4.0.0 → 6.0.0-beta.12026-02-01 PHP version history (5 changes)1.0.0PHP >=5.4.0 2.0.0-beta1PHP >=5.3.0 3.x-devPHP >=5.5.0 4.0.0-beta1PHP ^7.2 || ^8.0 6.0.0-beta.1PHP ^8.1 ### Community Maintainers ![](https://avatars.githubusercontent.com/u/25754?v=4)[Paul M. Jones](/maintainers/pmjones)[@pmjones](https://github.com/pmjones) ![](https://www.gravatar.com/avatar/29dba0e6add8d89fd3fc6126b213d5d2f57538ea78318963025d6ea98db34161?d=identicon)[harikt](/maintainers/harikt) --- Top Contributors [![harikt](https://avatars.githubusercontent.com/u/120454?v=4)](https://github.com/harikt "harikt (47 commits)")[![koriym](https://avatars.githubusercontent.com/u/529021?v=4)](https://github.com/koriym "koriym (33 commits)")[![armatronic](https://avatars.githubusercontent.com/u/407053?v=4)](https://github.com/armatronic "armatronic (10 commits)")[![tomkyle](https://avatars.githubusercontent.com/u/412560?v=4)](https://github.com/tomkyle "tomkyle (5 commits)")[![jakejohns](https://avatars.githubusercontent.com/u/174708?v=4)](https://github.com/jakejohns "jakejohns (5 commits)")[![NaokiTsuchiya](https://avatars.githubusercontent.com/u/17171732?v=4)](https://github.com/NaokiTsuchiya "NaokiTsuchiya (4 commits)")[![masakielastic](https://avatars.githubusercontent.com/u/49705?v=4)](https://github.com/masakielastic "masakielastic (2 commits)")[![iansltx](https://avatars.githubusercontent.com/u/472804?v=4)](https://github.com/iansltx "iansltx (1 commits)")[![Rudloff](https://avatars.githubusercontent.com/u/840125?v=4)](https://github.com/Rudloff "Rudloff (1 commits)")[![sunkan](https://avatars.githubusercontent.com/u/568492?v=4)](https://github.com/sunkan "sunkan (1 commits)")[![fiahfy](https://avatars.githubusercontent.com/u/7123916?v=4)](https://github.com/fiahfy "fiahfy (1 commits)")[![jakeasmith](https://avatars.githubusercontent.com/u/234832?v=4)](https://github.com/jakeasmith "jakeasmith (1 commits)")[![Khartir](https://avatars.githubusercontent.com/u/5592420?v=4)](https://github.com/Khartir "Khartir (1 commits)") --- Tags auracsrfflashphpsessionsession-segmentsessionflashflash messagesessionscsrf ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/aura-session/health.svg) ``` [![Health](https://phpackages.com/badges/aura-session/health.svg)](https://phpackages.com/packages/aura-session) ``` ### Alternatives [paragonie/anti-csrf Paragon Initiative's Anti-CSRF Security Library 307200.6k5](/packages/paragonie-anti-csrf)[owasp/csrf-protector-php CSRF protector php, a standalone php library for csrf mitigation in web applications. Easy to integrate in any php web app. 222348.3k4](/packages/owasp-csrf-protector-php)[kunststube/csrfp A signed token generator for cross site request forgery protection. 52209.5k1](/packages/kunststube-csrfp)[riimu/kit-csrf Secure and simple CSRF library protected against timing and BREACH attacks 6526.1k](/packages/riimu-kit-csrf)[ayesh/stateless-csrf Secret-key based state-less CSRF token generator and validator for PHP 8. State-less means you do not have to store the CSRF token in session or database. 3223.3k](/packages/ayesh-stateless-csrf)[selective/samesite-cookie Secure your site with SameSite cookies 10144.0k](/packages/selective-samesite-cookie) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)