PHPackages                             rudra/auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. rudra/auth

ActiveLibrary[Authentication & Authorization](/categories/authentication)

rudra/auth
==========

Authentication module for Rudra framework

v26.7.27(3w ago)16711MPL-2.0PHPPHP ^8.3CI passing

Since May 29Pushed 3w ago2 watchersCompare

[ Source](https://github.com/Jagepard/Rudra-Auth)[ Packagist](https://packagist.org/packages/rudra/auth)[ RSS](/packages/rudra-auth/feed)WikiDiscussions master Synced 2w ago

READMEChangelog (10)Dependencies (12)Versions (14)Used By (1)

[![PHPunit](https://github.com/Jagepard/Rudra-Auth/actions/workflows/php.yml/badge.svg)](https://github.com/Jagepard/Rudra-Auth/actions/workflows/php.yml)[![Maintainability](https://camo.githubusercontent.com/d59503d959a936ee51a69c1a886bdd55f5dec732e482b24eba7e575b0346f0ad/68747470733a2f2f716c74792e73682f6261646765732f31333436643737632d623766312d343438382d623733632d6234373538323136363036312f6d61696e7461696e6162696c6974792e737667)](https://qlty.sh/gh/Jagepard/projects/Rudra-Auth)[![CodeFactor](https://camo.githubusercontent.com/7ebf99e294676ca55b9d5da3ff8ec01341ba064b7caec297acb1df2e9cd88887/68747470733a2f2f7777772e636f6465666163746f722e696f2f7265706f7369746f72792f6769746875622f6a616765706172642f72756472612d617574682f6261646765)](https://www.codefactor.io/repository/github/jagepard/rudra-auth)[![Coverage Status](https://camo.githubusercontent.com/982139b149bb9e015cf8fb7731d358a7b7c5dcdc64fcd15a54982873f279fa04/68747470733a2f2f636f766572616c6c732e696f2f7265706f732f6769746875622f4a616765706172642f52756472612d417574682f62616467652e7376673f6272616e63683d6d6173746572)](https://coveralls.io/github/Jagepard/Rudra-Auth?branch=master)
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[](#)

Authentication, session management and RBAC | [API](https://github.com/Jagepard/Rudra-Auth/blob/master/docs.md "Documentation API")
-----------------------------------------------------------------------------------------------------------------------------------

[](#authentication-session-management-and-rbac--api)

#### Install

[](#install)

`composer require rudra/auth`

##### Usage

[](#usage)

```
use Rudra\Auth\AuthFacade as Auth;
```

##### Configuration

[](#configuration)

> For the component to work correctly, you need to add the following parameters to the Rudra configuration file:

```
# Secret key for encrypting cookies and generating session hashes
secret: your_super_secret_key_here

# Roles for Role-Based Access Control (the smaller the number, the higher the privilege)
roles:
    admin: 0
    editor: 1
    moderator: 2
    user: 3

# Environment (in the 'test' environment, cookies are not deleted on logout)
environment: production
```

##### User registration

[](#user-registration)

```
$user = [
    "email"    => "user@email.com",
    "password" => Auth::bcrypt("password")
];
```

##### Getting a user from the database

[](#getting-a-user-from-the-database)

```
$user = [
    "email"    => "user@email.com",
    "password" => "password_hash",
    "role"     => "admin"
];
```

##### Authentication

[](#authentication)

> The second argument is the **plain text password** entered by the user. The `$user['password']` must contain a **hash** from the database.

```
Auth::authentication(
    $user,
    "password",
    ["admin/dashboard", "login"],
    ["error" => "Wrong access data"]
);
```

> **Note:** For the "Remember Me" feature to work, the login form must contain a checkbox with the name `remember_me`.

##### Login form example

[](#login-form-example)

```

         Remember me / Запомнить меня

    Login

```

##### Restoring session (Remember Me)

[](#restoring-session-remember-me)

> Called at the beginning of the application loading (before authorization check). If the user has valid 'Remember Me' cookies, the session will be restored automatically.

```
Auth::restoreSessionIfSetRememberMe("login");
```

##### Authorization check

[](#authorization-check)

###### General authorization check

[](#general-authorization-check)

> Check if the user is authorized. If not — redirect to 'login'

```
if (!Auth::authorization(null, "login")) {
    exit;
}
```

> If you just need to get a boolean value without a redirect (for example, for an API):

```
$isLoggedIn = Auth::authorization();
```

###### Access to personal user resources

[](#access-to-personal-user-resources)

> For access control to a specific user's resources (e.g., profile, personal data), a token is used. The token is generated from the user's password, email, and session hash.

```
// Generate token for the current user
$token = md5($user['password'] . $user['email'] . Auth::getSessionHash());

// Check if the token matches the session token
if (!Auth::authorization($token, "login")) {
    exit;
}
```

##### Role-Based Access Control

[](#role-based-access-control)

> Check if the current role ('admin') has privileges not lower than the requested ones ('editor'). If privileges are insufficient — redirect to 'error/403'

```
use Rudra\Container\Facades\Session;

// Get the role of the current user from the session (for example, after authorization)
if (Session::has("user")) {
   $currentRole = Session::get("user")['role'] ?? 'user';
}

// Check if the permissions are sufficient for access (for example, 'editor' level is required)
if (!Auth::roleBasedAccess($currentRole, "editor", "error/403")) {
    exit;
}
```

##### Log out of the authentication session with a redirect to the login page

[](#log-out-of-the-authentication-session-with-a-redirect-to-the-login-page)

```
Auth::logout("login");
```

License
-------

[](#license)

This project is licensed under the **Mozilla Public License 2.0 (MPL-2.0)** — a free, open-source license that:

- Requires preservation of copyright and license notices,
- Allows commercial and non-commercial use,
- Requires that any modifications to the original files remain open under MPL-2.0,
- Permits combining with proprietary code in larger works.

📄 Full license text: [LICENSE](./LICENSE)
🌐 Official MPL-2.0 page:

###  Health Score

57

—

FairBetter than 98% of packages

Maintenance95

Actively maintained with recent releases

Popularity19

Limited adoption so far

Community14

Small or concentrated contributor base

Maturity85

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 99.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~270 days

Recently: every ~5 days

Total

12

Last Release

27d ago

Major Versions

v2.0.0 → v25.62025-06-28

v25.12 → v26.12025-12-26

PHP version history (3 changes)v2.0.0PHP >=7.1

v25.6PHP >=8.3

v26.7.1PHP ^8.3

### Community

Maintainers

![](https://www.gravatar.com/avatar/75e65761bdd94035d1c783773a706d5722ce3164fe55d9722581c2cb4a642d8c?d=identicon)[jagepard](/maintainers/jagepard)

---

Top Contributors

[![Jagepard](https://avatars.githubusercontent.com/u/4591345?v=4)](https://github.com/Jagepard "Jagepard (432 commits)")[![scrutinizer-auto-fixer](https://avatars.githubusercontent.com/u/6253494?v=4)](https://github.com/scrutinizer-auto-fixer "scrutinizer-auto-fixer (1 commits)")

---

Tags

authrudraauthAuthenticationrudra

### Embed Badge

![Health badge](/badges/rudra-auth/health.svg)

```
[![Health](https://phpackages.com/badges/rudra-auth/health.svg)](https://phpackages.com/packages/rudra-auth)
```

###  Alternatives

[tymon/jwt-auth

JSON Web Token Authentication for Laravel and Lumen

11.5k52.7M386](/packages/tymon-jwt-auth)[league/oauth2-server

A lightweight and powerful OAuth 2.0 authorization and resource server library with support for all the core specification grants. This library will allow you to secure your API with OAuth and allow your applications users to approve apps that want to access their data from your API.

6.7k151.3M327](/packages/league-oauth2-server)[auth0/auth0-php

PHP SDK for Auth0 Authentication and Management APIs.

41022.5M98](/packages/auth0-auth0-php)[kreait/firebase-tokens

A library to work with Firebase tokens

23947.1M19](/packages/kreait-firebase-tokens)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)