PHPackages                             hercdottech/stateless-token - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. hercdottech/stateless-token

ActiveLibrary[Authentication & Authorization](/categories/authentication)

hercdottech/stateless-token
===========================

A composer package to generate and validate stateless tokens

v1.0.0(11mo ago)016GPL-3.0-or-laterPHPPHP ^8.3

Since Jun 6Pushed 11mo agoCompare

[ Source](https://github.com/HercDotTech/package-stateless-token)[ Packagist](https://packagist.org/packages/hercdottech/stateless-token)[ RSS](/packages/hercdottech-stateless-token/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (2)Versions (2)Used By (0)

Stateless Token
===============

[](#stateless-token)

[![Build Status](https://camo.githubusercontent.com/32ff6d1b9286f192fa70b246664827f1a47d46b47c8fbf9c7777ba718d624161/68747470733a2f2f636963642e686572632e6c696e6b2f6170692f6261646765732f48657263446f74546563682f7061636b6167652d73746174656c6573732d746f6b656e2f7374617475732e737667)](https://camo.githubusercontent.com/32ff6d1b9286f192fa70b246664827f1a47d46b47c8fbf9c7777ba718d624161/68747470733a2f2f636963642e686572632e6c696e6b2f6170692f6261646765732f48657263446f74546563682f7061636b6167652d73746174656c6573732d746f6b656e2f7374617475732e737667)[![License: GNU GPL v3](https://camo.githubusercontent.com/6cf8a56b38e177513f3ffbe4099aefd74f6140d3860abffe84131c991794790c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d474e555f47504c5f76332d626c75652e737667)](https://opensource.org/licenses/gpl-3-0)[![Packagist Version](https://camo.githubusercontent.com/9f04af2e6085a2efa3d26b041d149515478a9db443d83e7379c7c24b1d94a222/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f68657263646f74746563682f73746174656c6573732d746f6b656e)](https://packagist.org/packages/hercdottech/stateless-token)

The `hercdottech/stateless-token` PHP package provides a way to generate and validate stateless tokens. Without making use of a database, files, or any other kind of state, this package relies on a private key known only to the server and an array of clues to validate the tokens.

Due to the stateless nature of this package, it cannot be used to protect against replay attacks.

Requirements
------------

[](#requirements)

- PHP 8.3 or later
- PHP JSON Extension (installed by default)
- PHP Hash Extension (installed by default)

Features
--------

[](#features)

- Generate secure tokens using sha256 algorithm HMAC hash.
- The expiration period of each token is configurable, set to 1 hour by default.
- The generated tokens are URL-safe and can be used with GET requests.

Installation
------------

[](#installation)

Run the following command in your terminal:

```
composer require hercdottech/stateless-token

```

###  Health Score

31

—

LowBetter than 68% of packages

Maintenance51

Moderate activity, may be stable

Popularity6

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity51

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

346d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/e2520a7e993ca72ca8729dd67f70f5ff10d7d476c40dddcc8ca7ff9bfb71f063?d=identicon)[HercDotTech](/maintainers/HercDotTech)

---

Top Contributors

[![HercDotTech](https://avatars.githubusercontent.com/u/15087154?v=4)](https://github.com/HercDotTech "HercDotTech (1 commits)")

###  Code Quality

TestsPHPUnit

Code StylePHP CS Fixer

### Embed Badge

![Health badge](/badges/hercdottech-stateless-token/health.svg)

```
[![Health](https://phpackages.com/badges/hercdottech-stateless-token/health.svg)](https://phpackages.com/packages/hercdottech-stateless-token)
```

###  Alternatives

[bezhansalleh/filament-shield

Filament support for `spatie/laravel-permission`.

2.8k2.9M88](/packages/bezhansalleh-filament-shield)[gesdinet/jwt-refresh-token-bundle

Implements a refresh token system over Json Web Tokens in Symfony

70516.4M35](/packages/gesdinet-jwt-refresh-token-bundle)[illuminate/auth

The Illuminate Auth package.

9327.3M1.0k](/packages/illuminate-auth)[beatswitch/lock

A flexible, driver based Acl package for PHP 5.4+

870304.7k2](/packages/beatswitch-lock)[amocrm/amocrm-api-library

amoCRM API Client

182728.5k6](/packages/amocrm-amocrm-api-library)[vonage/jwt

A standalone package for creating JWTs for Vonage APIs

424.1M4](/packages/vonage-jwt)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)