PHPackages                             infocyph/auth-layer - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. infocyph/auth-layer

ActiveLibrary[Authentication & Authorization](/categories/authentication)

infocyph/auth-layer
===================

Framework-agnostic authentication and authorization core for PHP.

00PHPCI passing

Since Jun 8Pushed yesterdayCompare

[ Source](https://github.com/infocyph/AuthLayer)[ Packagist](https://packagist.org/packages/infocyph/auth-layer)[ RSS](/packages/infocyph-auth-layer/feed)WikiDiscussions main Synced yesterday

READMEChangelogDependenciesVersions (2)Used By (0)

AuthLayer
=========

[](#authlayer)

[![Security & Standards](https://github.com/infocyph/AuthLayer/actions/workflows/security-standards.yml/badge.svg)](https://github.com/infocyph/AuthLayer/actions/workflows/security-standards.yml)[![Packagist Downloads](https://camo.githubusercontent.com/0465df180bb055ba8849567f4b7e409c25abc6fee0a8b3be567450af8290fe91/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f696e666f637970682f417574684c617965723f636f6c6f723d677265656e266c696e6b3d68747470732533412532462532467061636b61676973742e6f72672532467061636b61676573253246696e666f63797068253246417574684c61796572)](https://camo.githubusercontent.com/0465df180bb055ba8849567f4b7e409c25abc6fee0a8b3be567450af8290fe91/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f696e666f637970682f417574684c617965723f636f6c6f723d677265656e266c696e6b3d68747470732533412532462532467061636b61676973742e6f72672532467061636b61676573253246696e666f63797068253246417574684c61796572)[![License: MIT](https://camo.githubusercontent.com/784362b26e4b3546254f1893e778ba64616e362bd6ac791991d2c9e880a3a64e/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d677265656e2e737667)](https://opensource.org/licenses/MIT)[![Packagist Version](https://camo.githubusercontent.com/a1bef5cfde6b66b4ab3d74eea97ef208af3a10dfe50f851967788f5e13e92120/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f696e666f637970682f417574684c61796572)](https://camo.githubusercontent.com/a1bef5cfde6b66b4ab3d74eea97ef208af3a10dfe50f851967788f5e13e92120/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f696e666f637970682f417574684c61796572)[![Packagist PHP Version](https://camo.githubusercontent.com/994a472c54e80d0828f2e15b0ffce291839aefc7aae70b9a4e69fa69121003d0/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f646570656e64656e63792d762f696e666f637970682f417574684c617965722f706870)](https://camo.githubusercontent.com/994a472c54e80d0828f2e15b0ffce291839aefc7aae70b9a4e69fa69121003d0/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f646570656e64656e63792d762f696e666f637970682f417574684c617965722f706870)[![GitHub Code Size](https://camo.githubusercontent.com/6bcc396d81f00809305cbd7ae0f1109be090971b26eedb3608081a62cd9d3644/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f636f64652d73697a652f696e666f637970682f417574684c61796572)](https://camo.githubusercontent.com/6bcc396d81f00809305cbd7ae0f1109be090971b26eedb3608081a62cd9d3644/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f636f64652d73697a652f696e666f637970682f417574684c61796572)[![Documentation](https://camo.githubusercontent.com/d03d43fd3c23e159f8a62877d04f8d12539db55a83af53a8d4fb69f3d663c183/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f446f63756d656e746174696f6e2d417574684c617965722d626c75653f6c6f676f3d72656164746865646f6373266c6f676f436f6c6f723d7768697465)](https://docs.infocyph.com/projects/AuthLayer/en/latest/)

Dependency-free authentication and authorization core for PHP.

Overview
--------

[](#overview)

AuthLayer owns authentication and authorization orchestration, domain contracts, value objects, decisions, audit events, and notification intents.

AuthLayer does not implement or require concrete:

- password hashing
- token signing or encryption
- OTP algorithms
- database persistence
- cache backends
- notification delivery
- HTTP or framework runtime integration

Those concerns belong in bridge packages.

Package
-------

[](#package)

- Composer: `infocyph/auth-layer`
- Namespace: `Infocyph\AuthLayer`
- PHP: `>=8.4`

Core Surface
------------

[](#core-surface)

AuthLayer currently provides source modules for:

- accounts and principals
- login and logout orchestration
- sessions and remember-me
- password reset and password change
- email verification
- passwordless flows
- access and refresh token lifecycle
- MFA orchestration
- passkey orchestration
- authorization gates and permission authorizers
- delegation and grants
- device trust and lockout
- audit events and notification intents
- in-memory support stores
- local clock, ID, and security contracts

Current Status
--------------

[](#current-status)

The package contains:

- concrete contracts and DTOs
- orchestration managers
- in-memory stores for development and testing
- Pest coverage across the main library surface
- PhpBench benchmarks for core authentication, authorization, and support paths

Framework adapters, transport integrations, and concrete crypto or OTP implementations are intentionally out of scope for this package.

###  Health Score

21

—

LowBetter than 18% of packages

Maintenance65

Regular maintenance activity

Popularity0

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity13

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/33b750b84ab22f2038ef9b90ee48f2fcdaab6b5698e9f956a89a152466200b63?d=identicon)[abmmhasan](/maintainers/abmmhasan)

---

Top Contributors

[![abmmhasan](https://avatars.githubusercontent.com/u/7711128?v=4)](https://github.com/abmmhasan "abmmhasan (6 commits)")

### Embed Badge

![Health badge](/badges/infocyph-auth-layer/health.svg)

```
[![Health](https://phpackages.com/badges/infocyph-auth-layer/health.svg)](https://phpackages.com/packages/infocyph-auth-layer)
```

###  Alternatives

[kartik-v/yii2-password

Useful password strength validation utilities for Yii Framework 2.0

761.2M17](/packages/kartik-v-yii2-password)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)