PHPackages                             jamesedmonston/graphql-authentication - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication &amp; Authorization](/categories/authentication)
4. /
5. jamesedmonston/graphql-authentication

ActiveCraft-plugin[Authentication &amp; Authorization](/categories/authentication)

jamesedmonston/graphql-authentication
=====================================

GraphQL authentication for your headless Craft CMS applications.

3.1.0(2mo ago)2917.0k↑166.7%27[6 issues](https://github.com/jamesedmonston/graphql-authentication/issues)MITPHPPHP ^8.2

Since Nov 3Pushed 2mo ago1 watchersCompare

[ Source](https://github.com/jamesedmonston/graphql-authentication)[ Packagist](https://packagist.org/packages/jamesedmonston/graphql-authentication)[ RSS](/packages/jamesedmonston-graphql-authentication/feed)WikiDiscussions develop Synced 1mo ago

READMEChangelog (10)Dependencies (9)Versions (64)Used By (0)

GraphQL Authentication plugin for Craft CMS 4.0+
================================================

[](#graphql-authentication-plugin-for-craft-cms-40)

GraphQL Authentication adds a JWT authentication layer to your Craft CMS GraphQL endpoint.

Plugin Overview
---------------

[](#plugin-overview)

- Adds support for user registration and authentication (see [Authentication](https://graphql-authentication.jamesedmonston.co.uk/usage/authentication))
- Adds support for Two-Factor Authentication (see [Two-Factor Authentication](https://graphql-authentication.jamesedmonston.co.uk/usage/two-factor-authentication))
- Adds support for Magic Link Authentication (see [Magic Authentication](https://graphql-authentication.jamesedmonston.co.uk/usage/magic-authentication))
- Adds support for social sign-in – currently Google, Facebook, Twitter, Apple, and Microsoft (see [Social](https://graphql-authentication.jamesedmonston.co.uk/usage/social))
- Adds ability to define per-section user restrictions (queries and mutations can be limited to author-only) (see [User Settings](https://graphql-authentication.jamesedmonston.co.uk/settings/users))
- Checks mutation fields against schema permissions, and prevents fields being saved if user is trying to access private entries/assets
- Adds ability to assign unique schemas for each user group
- Adds ability to restrict user queries and mutations to Craft multi-site sites
- Adds ability to mark fields as private – stopping users from querying/mutating fields on entries
- Adds a unique, per-user query cache

---

Use the table below to determine which version of the plugin you should install.

Craft CMS VersionPlugin Version534231Documentation
-------------

[](#documentation)

You can view the documention for the plugin [here](https://graphql-authentication.jamesedmonston.co.uk).

###  Health Score

59

—

FairBetter than 99% of packages

Maintenance80

Actively maintained with recent releases

Popularity39

Limited adoption so far

Community23

Small or concentrated contributor base

Maturity80

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 92.5% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~32 days

Recently: every ~137 days

Total

61

Last Release

81d ago

Major Versions

1.12.3 → 2.0.02022-09-06

2.5.0 → 3.0.0-RC12024-08-26

PHP version history (3 changes)1.11.0PHP ^7.4 || ^8.0

2.0.0PHP ^8.0.2

3.0.0-RC1PHP ^8.2

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/4851924?v=4)[James Edmonston](/maintainers/jamesedmonston)[@jamesedmonston](https://github.com/jamesedmonston)

---

Top Contributors

[![jamesedmonston](https://avatars.githubusercontent.com/u/4851924?v=4)](https://github.com/jamesedmonston "jamesedmonston (541 commits)")[![brandonkelly](https://avatars.githubusercontent.com/u/47792?v=4)](https://github.com/brandonkelly "brandonkelly (14 commits)")[![nstCactus](https://avatars.githubusercontent.com/u/353843?v=4)](https://github.com/nstCactus "nstCactus (4 commits)")[![SayChi](https://avatars.githubusercontent.com/u/12159362?v=4)](https://github.com/SayChi "SayChi (4 commits)")[![zsavajji](https://avatars.githubusercontent.com/u/6460348?v=4)](https://github.com/zsavajji "zsavajji (3 commits)")[![denisyilmaz](https://avatars.githubusercontent.com/u/4189607?v=4)](https://github.com/denisyilmaz "denisyilmaz (3 commits)")[![sgtpenguin](https://avatars.githubusercontent.com/u/16600959?v=4)](https://github.com/sgtpenguin "sgtpenguin (3 commits)")[![Tam](https://avatars.githubusercontent.com/u/977594?v=4)](https://github.com/Tam "Tam (3 commits)")[![roelvanhintum](https://avatars.githubusercontent.com/u/1023734?v=4)](https://github.com/roelvanhintum "roelvanhintum (2 commits)")[![JamesNuttall](https://avatars.githubusercontent.com/u/22011451?v=4)](https://github.com/JamesNuttall "JamesNuttall (2 commits)")[![boudewijn-zicht](https://avatars.githubusercontent.com/u/22885475?v=4)](https://github.com/boudewijn-zicht "boudewijn-zicht (1 commits)")[![d-karstens](https://avatars.githubusercontent.com/u/21274925?v=4)](https://github.com/d-karstens "d-karstens (1 commits)")[![Stalex89](https://avatars.githubusercontent.com/u/23526237?v=4)](https://github.com/Stalex89 "Stalex89 (1 commits)")[![hendrik-agprop](https://avatars.githubusercontent.com/u/17151934?v=4)](https://github.com/hendrik-agprop "hendrik-agprop (1 commits)")[![awasser-omnispear](https://avatars.githubusercontent.com/u/31863006?v=4)](https://github.com/awasser-omnispear "awasser-omnispear (1 commits)")[![robinbeatty](https://avatars.githubusercontent.com/u/48855073?v=4)](https://github.com/robinbeatty "robinbeatty (1 commits)")

---

Tags

graphqlAuthenticationcmsCraftcraftcmscraft-plugingraphql-authentication

### Embed Badge

![Health badge](/badges/jamesedmonston-graphql-authentication/health.svg)

```
[![Health](https://phpackages.com/badges/jamesedmonston-graphql-authentication/health.svg)](https://phpackages.com/packages/jamesedmonston-graphql-authentication)
```

###  Alternatives

[wrav/oembed

A simple plugin to extract media information from websites, like youtube videos, twitter statuses or blog articles.

36205.0k3](/packages/wrav-oembed)[verbb/knock-knock

Password protect your public facing Craft website with a single password.

17122.8k7](/packages/verbb-knock-knock)[matt-west/craft-recaptcha

Integrate Google’s reCAPTCHA into your forms.

1959.9k1](/packages/matt-west-craft-recaptcha)[thejoshsmith/craft-fab-permissions

Give yourself better control over your sections with Craft Field and Tab (FAB) Permissions. Restrict which tabs and fields are visible to different user groups.

1611.5k](/packages/thejoshsmith-craft-fab-permissions)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
