PHPackages                             collecthor/yii2-session-auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. collecthor/yii2-session-auth

ActiveLibrary[Authentication & Authorization](/categories/authentication)

collecthor/yii2-session-auth
============================

Session authentication for your API

v1.2.5(3y ago)022.9kMITPHPPHP >= 8.1

Since Feb 24Pushed 3y ago1 watchersCompare

[ Source](https://github.com/collecthor/yii2-session-auth)[ Packagist](https://packagist.org/packages/collecthor/yii2-session-auth)[ RSS](/packages/collecthor-yii2-session-auth/feed)WikiDiscussions master Synced 2w ago

READMEChangelog (9)Dependencies (7)Versions (10)Used By (0)

Session authentication for your API
===================================

[](#session-authentication-for-your-api)

When you expose an API you often have a different configuration for authentication. Most APIs use some kind of session-less authentication using tokens of some kind.

This component implements such session-less authentication where the token is the session key. It works by shortly opening the session to extract the relevant data, then aborting it using `session_abort()`. This means there is no write done to the session and locking (if using the standard file backend) is kept to a minimum.

###  Health Score

33

—

LowBetter than 72% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity25

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity64

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~26 days

Recently: every ~42 days

Total

9

Last Release

1425d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/18b13c534e3812b66a72645fe215301b54fc4d288f6396fee9385b681e27da18?d=identicon)[SamMousa](/maintainers/SamMousa)

---

Top Contributors

[![SamMousa](https://avatars.githubusercontent.com/u/547021?v=4)](https://github.com/SamMousa "SamMousa (15 commits)")

###  Code Quality

TestsPHPUnit

Static AnalysisPsalm

Code StyleECS

Type Coverage Yes

### Embed Badge

![Health badge](/badges/collecthor-yii2-session-auth/health.svg)

```
[![Health](https://phpackages.com/badges/collecthor-yii2-session-auth/health.svg)](https://phpackages.com/packages/collecthor-yii2-session-auth)
```

###  Alternatives

[tg/tgwebvalid

An easy way to validate Telegram Login Widget and Telegram Mini App users on your website using PHP

6827.5k1](/packages/tg-tgwebvalid)[vitalybaev/laravel5-dkim

Laravel 5/6 package for signing outgoing messages with DKIM.

3163.1k](/packages/vitalybaev-laravel5-dkim)[kissdigital-com/apple-sign-in-client-secret-generator

PHP package for generating 'client secret' for Sign In with Apple

2125.5k](/packages/kissdigital-com-apple-sign-in-client-secret-generator)[denniseilander/laravel-passport-scopes-restriction

Restrict scopes for different Laravel Passport clients.

1636.3k](/packages/denniseilander-laravel-passport-scopes-restriction)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)