PHPackages                             modernmcguire/hq\_overwatch - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. modernmcguire/hq\_overwatch

ActiveLibrary[Authentication & Authorization](/categories/authentication)

modernmcguire/hq\_overwatch
===========================

MMP HQ Companion Package

v1.0.3(1mo ago)0161proprietaryPHPPHP ^8.2

Since Jun 14Pushed 1mo agoCompare

[ Source](https://github.com/modernmcguire/hq_overwatch)[ Packagist](https://packagist.org/packages/modernmcguire/hq_overwatch)[ RSS](/packages/modernmcguire-hq-overwatch/feed)WikiDiscussions main Synced 1w ago

READMEChangelog (1)Dependencies (12)Versions (4)Used By (0)

MMP Overwatch
=============

[](#mmp-overwatch)

The **MMP HQ companion package** for Modern McGuire Laravel projects.

Requirements
------------

[](#requirements)

- PHP 8.2+
- Laravel 10 – 13

Install
-------

[](#install)

```
composer require modernmcguire/hq_overwatch
```

Publish the config if you want to edit it:

```
php artisan vendor:publish --tag=mmp-config
```

Configure
---------

[](#configure)

In **MMP HQ**, open the project's panel → **Link Overwatch** → copy the issued public key into this app's `.env`:

```
MMP_OVERWATCH_PUBLIC_KEY=base64-public-key-from-hq
```

Then run HQ's **live test** in the link wizard. Green means the key is installed and SSO will work.

### `config/mmp.php`

[](#configmmpphp)

KeyDefaultPurpose`overwatch.public_key``env('MMP_OVERWATCH_PUBLIC_KEY')`HQ's Ed25519 public key for this project.`overwatch.allowed_domain``modernmcguire.com`Only emails on this domain may sign in.`overwatch.redirect_to``/`Where users land after login.`overwatch.token_ttl``60`Max accepted token age (seconds).`overwatch.route_prefix``mmp/overwatch`URI prefix for the package routes.`overwatch.provision_user``null`Optional `fn (array $claims): Authenticatable` override.How a user gets provisioned
---------------------------

[](#how-a-user-gets-provisioned)

When an unrecognised email signs in, the package creates the user and elevates them to admin using whatever the app supports: a Spatie `admin` role, an `is_admin`/`role`column, or a plain user if neither exists. Override entirely with the `provision_user` closure (see `AGENTS.md`).

Security
--------

[](#security)

Asymmetric, per-environment keys (HQ signs, this app verifies); tokens are single-use, host-bound, domain-restricted, issuer-checked, size-capped, and expire in ~60s (the app enforces its own max age from `iat`, not just HQ's `exp`). Full details in `AGENTS.md`and `MAINTENANCE.md`.

**Requirements for the guarantees to hold:**

- Use a **shared, persistent cache** (`redis` or `database`) — the single-use `jti` is stored there. The `array`/`null` store (or a per-node cache behind a load balancer) weakens replay protection; the package logs a warning if it sees one.
- Run behind correct **`TrustProxies` / `TrustHosts`** config so `request()->getHost()`(used for `aud` binding) can't be spoofed.

Tests
-----

[](#tests)

```
composer install
./vendor/bin/pest
```

###  Health Score

43

—

FairBetter than 89% of packages

Maintenance91

Actively maintained with recent releases

Popularity15

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity48

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 66.7% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~0 days

Total

3

Last Release

45d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/2a312bc4f407351159ffa4e705eb33dfb79b4dceaefdc33e4fad6d290848538a?d=identicon)[tgmcguire](/maintainers/tgmcguire)

---

Top Contributors

[![tgmcguire](https://avatars.githubusercontent.com/u/2480113?v=4)](https://github.com/tgmcguire "tgmcguire (2 commits)")[![mattmurtaugh](https://avatars.githubusercontent.com/u/914335?v=4)](https://github.com/mattmurtaugh "mattmurtaugh (1 commits)")

---

Tags

laravelSSOmodernmcguiremmp

###  Code Quality

TestsPest

### Embed Badge

![Health badge](/badges/modernmcguire-hq-overwatch/health.svg)

```
[![Health](https://phpackages.com/badges/modernmcguire-hq-overwatch/health.svg)](https://phpackages.com/packages/modernmcguire-hq-overwatch)
```

###  Alternatives

[psalm/plugin-laravel

Psalm plugin for Laravel

3345.3M348](/packages/psalm-plugin-laravel)[laravel/pulse

Laravel Pulse is a real-time application performance monitoring tool and dashboard for your Laravel application.

1.7k15.1M139](/packages/laravel-pulse)[roots/acorn

Framework for Roots WordPress projects built with Laravel components.

9762.4M134](/packages/roots-acorn)[laravel/mcp

Rapidly build MCP servers for your Laravel applications.

77922.3M189](/packages/laravel-mcp)[api-platform/laravel

API Platform support for Laravel

58174.6k17](/packages/api-platform-laravel)[hasinhayder/tyro

Tyro - The ultimate Authentication, Authorization, and Role & Privilege Management solution for Laravel 12 & 13

6765.1k6](/packages/hasinhayder-tyro)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)