PHPackages                             innovatif/restfulserver-tokenauth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. innovatif/restfulserver-tokenauth

ActiveSilverstripe-vendormodule[Authentication & Authorization](/categories/authentication)

innovatif/restfulserver-tokenauth
=================================

Adds token authentication to RestfulServer

00PHPCI passing

Since Apr 23Pushed 3mo agoCompare

[ Source](https://github.com/Innovatif/restfulserver-tokenauth)[ Packagist](https://packagist.org/packages/innovatif/restfulserver-tokenauth)[ RSS](/packages/innovatif-restfulserver-tokenauth/feed)WikiDiscussions master Synced 1w ago

READMEChangelogDependenciesVersions (1)Used By (0)

RestfulSergver Token Auth module
================================

[](#restfulsergver-token-auth-module)

Token based authentification for SilverStripe's RestfulServer module.

Configuration
-------------

[](#configuration)

There is no special configuration needed. When the module is installed, it'll automatically take over authentification for RestfulServer.

Enabling REST calls for DataObjects
-----------------------------------

[](#enabling-rest-calls-for-dataobjects)

You need to set the DataObject to "IsActive". This enables globally the REST calls for the specific class.

Updating User Permissions
-------------------------

[](#updating-user-permissions)

The module offers a fine-grained permission model for each DataObject. The permissions are stored in the SecurityAdmin for each user.

A user needs general "Enable REST calls" checked and additionally the permissions for each class:

- IsActive: if the user is allowed to use the REST API for that DataObject
- CanView: if the user is allowed to view the DataObject
- CanEdit: if the user is allowed to edit the DataObject
- CanCreate: if the user is allowed to create the DataObject
- CanDelete: if the user is allowed to delete the DataObject

If a ClassName is missing in permissions GridField, run `dev/build?flush=all` to update the class relations.

Requirements
------------

[](#requirements)

This module requires a specific branch of `silverstripe/restfulserver` (version 3.1) which includes necessary hooks and cleanup. See [silverstripe/restfulserver issue #144](https://github.com/silverstripe/silverstripe-restfulserver/issues/144) for details.

To use this in your project, add the following to your `composer.json`:

```
{
    "repositories": [
        {
            "type": "git",
            "url": "https://github.com/wernerkrauss/silverstripe-restfulserver.git"
        }
    ],
    "require": {
        "silverstripe/restfulserver": "dev-144-cleanup-hooks as 3.1"
    }
}
```

Troubleshooting
---------------

[](#troubleshooting)

If you have problems with the module, please check the following:

- run `dev/build?flush=all`
- Are REST calls enabled in for that user?
- Does the user have the correct permissions for the DataObject class? IsActive is always needed.

###  Health Score

18

—

LowBetter than 7% of packages

Maintenance55

Moderate activity, may be stable

Popularity0

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity12

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/97c7c3c6195eea35946a6a79a920828e6a6d6590979daf7809252f0a521ff7a2?d=identicon)[tomaszpirc](/maintainers/tomaszpirc)

---

Top Contributors

[![wernerkrauss](https://avatars.githubusercontent.com/u/1043925?v=4)](https://github.com/wernerkrauss "wernerkrauss (27 commits)")

### Embed Badge

![Health badge](/badges/innovatif-restfulserver-tokenauth/health.svg)

```
[![Health](https://phpackages.com/badges/innovatif-restfulserver-tokenauth/health.svg)](https://phpackages.com/packages/innovatif-restfulserver-tokenauth)
```

###  Alternatives

[vitalybaev/laravel5-dkim

Laravel 5/6 package for signing outgoing messages with DKIM.

3163.1k](/packages/vitalybaev-laravel5-dkim)[firemultimedia/mautic-multi-captcha-bundle

This plugin brings Google's reCAPTCHA, hCaptcha, and Cloudflare Turnstile integration to mautic.

141.3k](/packages/firemultimedia-mautic-multi-captcha-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)