PHPackages                             rickselby/laravel-external-basic-auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. rickselby/laravel-external-basic-auth

AbandonedArchivedLibrary[Authentication & Authorization](/categories/authentication)

rickselby/laravel-external-basic-auth
=====================================

External Basic Auth for Laravel

1.8.0(2y ago)25.9k↑34.4%MITPHPPHP 8.\*CI passing

Since Dec 1Pushed 8mo ago1 watchersCompare

[ Source](https://github.com/rickselby/laravel-external-basic-auth)[ Packagist](https://packagist.org/packages/rickselby/laravel-external-basic-auth)[ RSS](/packages/rickselby-laravel-external-basic-auth/feed)WikiDiscussions main Synced 2w ago

READMEChangelog (10)Dependencies (3)Versions (11)Used By (0)

Laravel External Basic Auth
===========================

[](#laravel-external-basic-auth)

[![Software License](https://camo.githubusercontent.com/074b89bca64d3edc93a1db6c7e3b1636b874540ba91d66367c0e5e354c56d0ea/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4d49542d627269676874677265656e2e737667)](LICENSE)[![Packagist Version](https://camo.githubusercontent.com/82d078b648b88c093943e053f70b42c5e4b0312d45bcf75787e34fa87b3c76bf/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f7269636b73656c62792f6c61726176656c2d65787465726e616c2d62617369632d61757468)](https://camo.githubusercontent.com/82d078b648b88c093943e053f70b42c5e4b0312d45bcf75787e34fa87b3c76bf/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f7269636b73656c62792f6c61726176656c2d65787465726e616c2d62617369632d61757468)

This is a guard for Laravel that assumes the value in `$_SERVER['REMOTE_USER']`is the identifier for the currently logged in user.

Laravel's built-in basic auth still auths the username and passwords against the `users` table, which in our case will not contain their password.

Usage
-----

[](#usage)

```
composer require rickselby/laravel-external-basic-auth

```

Then, edit your `config/auth.php` file, and under `guards`, set the appropriate driver to `external`; e.g.

```
'guards' => [
    'web' => [
        'driver' => 'external',
        'provider' => 'users',
    ],
],

```

Alternate lookup field
----------------------

[](#alternate-lookup-field)

By default, the package will match the `$_SERVER['REMOTE_USER']` value against the `id` of the user model. If the `$_SERVER['REMOTE_USER']` value is in a different field (e.g. the user model has a standard auto-incrementable integer for an ID, and a separate `username` field) then the package can look up a user by this field instead.

Edit your `config/auth.php` file, and under the appropriate `guard`, add a `field` setting:

```
'guards' => [
    'web' => [
        'driver' => 'external',
        'provider' => 'users',
        'field' => 'username',
    ],
],

```

Eager load relationships
------------------------

[](#eager-load-relationships)

It may be desirable to eager load relationships for the authenticated user.

Edit your `config/auth.php` file, and under the appropriate `guard`, add a `load` setting:

```
'guards' => [
    'web' => [
        'driver' => 'external',
        'provider' => 'users',
        'load' => [
            'permissions',
            'roles',
        ],
    ],
],

```

Looking for REMOTE\_USER in headers
-----------------------------------

[](#looking-for-remote_user-in-headers)

If your app is running in a docker container, or some other situation where your app is separated from the authentication, it may be desirable to pass the `REMOTE_USER` to the app by headers.

Edit your `config/auth.php` file, and under the appropriate `guard`, add a `header` setting:

```
'guards' => [
    'web' => [
        'driver' => 'external',
        'provider' => 'users',
        'header' => 'X-forwarded-REMOTE_USER',
    ],
],

```

Stripping a string from the user identifier
-------------------------------------------

[](#stripping-a-string-from-the-user-identifier)

If your authentication field has a part you do not wish to use (e.g. ), this can be stripped:

```
'guards' => [
    'web' => [
        'driver' => 'external',
        'provider' => 'users',
        'strip' => '@domain.com',
    ],
],

```

###  Health Score

40

—

FairBetter than 86% of packages

Maintenance42

Moderate activity, may be stable

Popularity24

Limited adoption so far

Community10

Small or concentrated contributor base

Maturity68

Established project with proven stability

 Bus Factor1

Top contributor holds 91.1% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~214 days

Recently: every ~131 days

Total

10

Last Release

887d ago

PHP version history (5 changes)1.0PHP >=7.0

1.2PHP >=7.3

1.3.1PHP ^7.3|^8.0.0

1.5.0PHP ^7.3|^8.0

1.7.0PHP 8.\*

### Community

Maintainers

![](https://www.gravatar.com/avatar/6cc8910980f053d8ceb2e9d938427cf03ae509884763a10f916b4eef5591934f?d=identicon)[rickselby](/maintainers/rickselby)

---

Top Contributors

[![rickselby](https://avatars.githubusercontent.com/u/1564517?v=4)](https://github.com/rickselby "rickselby (51 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (3 commits)")[![StyleCIBot](https://avatars.githubusercontent.com/u/11048387?v=4)](https://github.com/StyleCIBot "StyleCIBot (2 commits)")

---

Tags

laravelauthbasicexternal

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/rickselby-laravel-external-basic-auth/health.svg)

```
[![Health](https://phpackages.com/badges/rickselby-laravel-external-basic-auth/health.svg)](https://phpackages.com/packages/rickselby-laravel-external-basic-auth)
```

###  Alternatives

[lab404/laravel-impersonate

Laravel Impersonate is a plugin that allows to you to authenticate as your users.

2.3k19.4M70](/packages/lab404-laravel-impersonate)[api-platform/laravel

API Platform support for Laravel

58190.1k21](/packages/api-platform-laravel)[ecotone/laravel

Ecotone for Laravel — CQRS, Event Sourcing, Sagas, Durable Workflows, and Outbox on top of Laravel Queue, via PHP attributes.

21327.3k4](/packages/ecotone-laravel)[lakm/nopass

Provides passwordless authentication for your laravel projects.

2216.7k3](/packages/lakm-nopass)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)