PHPackages                             seatplus/auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. seatplus/auth

ActiveSeatplus-package[Authentication & Authorization](/categories/authentication)

seatplus/auth
=============

SeAT plus package that handles authentication agnostic to SeAT plus usage as pure API or Web

4.1.2(2w ago)14.5k1[6 issues](https://github.com/seatplus/auth/issues)[2 PRs](https://github.com/seatplus/auth/pulls)2MITPHPPHP ^8.5CI failing

Since Apr 25Pushed 2w ago1 watchersCompare

[ Source](https://github.com/seatplus/auth)[ Packagist](https://packagist.org/packages/seatplus/auth)[ RSS](/packages/seatplus-auth/feed)WikiDiscussions 4.x Synced today

READMEChangelog (10)Dependencies (59)Versions (65)Used By (2)

seatplus/auth
=============

[](#seatplusauth)

[![CI](https://github.com/seatplus/auth/actions/workflows/laravel.yml/badge.svg)](https://github.com/seatplus/auth/actions/workflows/laravel.yml)

Handles authentication, authorisation, and SSO scope compliance for the seatplus EVE Online management platform. This is the core package — `seatplus/eveapi` and `seatplus/web` both depend on it.

Overview
--------

[](#overview)

### Role system

[](#role-system)

Four role types with distinct membership and permission semantics:

TypeMembershipUse case`automatic`Auto-assigned when a character belongs to a configured corporation or allianceFleet / alliance access`on-request`User applies, moderator approves or deniesCorp-specific elevated access`manual`Admin explicitly adds / removes individual usersOne-off grants`opt-in`User self-joins if they meet the criteriaOpt-in programmes### Affiliation system

[](#affiliation-system)

Every role has `Affiliation` records that define **permission scope** (which EVE entities the role holder can access data for), not membership. Three types:

- `allowed` — these corporations / alliances / characters are in scope
- `inverse` — everyone *except* these is in scope
- `forbidden` — always excluded, overrides `allowed` / `inverse`

### SSO scope compliance

[](#sso-scope-compliance)

`IsUserCompliantService` checks whether every character owned by a user has all required OAuth scopes. Required scopes are aggregated from global settings, corporation-level `SsoScopes` records, and alliance-level records. Non-compliant users have their role memberships set to `inactive` automatically on the next `handleMembers()` call.

### Permission checking

[](#permission-checking)

`CanUserService::check()` runs a Laravel Pipeline to validate a set of EVE entity IDs against a user's permissions. The pipeline strips IDs the user owns, IDs covered by in-game corporation roles (e.g. Director), and IDs covered by Spatie permissions. Any remaining IDs are denied. The `superuser` permission bypasses all checks.

Installation
------------

[](#installation)

```
composer require seatplus/auth
```

Publish and run migrations:

```
php artisan vendor:publish --provider="Seatplus\Auth\AuthServiceProvider"
php artisan migrate
```

Usage
-----

[](#usage)

### Add OAuth scopes to a character

[](#add-oauth-scopes-to-a-character)

By default the minimal scopes are requested. To step up a character to additional scopes, redirect to:

```
/eve/sso/{character_id}/step_up?add_scopes=esi-skills.read_skills.v1,esi-wallet.read_character_wallet.v1

```

### Check permissions

[](#check-permissions)

```
use Seatplus\Auth\Services\Dtos\ValidateIdsDTO;
use Seatplus\Auth\Services\CanUserService;

$dto = ValidateIdsDTO::make(entity_ids: [12345678], user: $user);
CanUserService::check($user, $dto, permissions: ['view member tracking']);
```

Development
-----------

[](#development)

### Requirements

[](#requirements)

- PHP 8.3+
- PostgreSQL (user `seatplus`, password `secret`, database `laravel` @ `127.0.0.1:5432`)
- Redis @ `127.0.0.1:6379`

### Running the test suite

[](#running-the-test-suite)

```
composer run test           # lint + PHPStan + type-coverage + unit tests
composer run test:unit      # unit tests only
composer run test:lint      # Pint formatting check
composer run lint           # auto-fix formatting with Pint
composer run test:types     # PHPStan static analysis
composer run test:type-coverage  # 100% type coverage check
```

###  Health Score

56

—

FairBetter than 97% of packages

Maintenance77

Regular maintenance activity

Popularity25

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity88

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 96% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~43 days

Recently: every ~5 days

Total

53

Last Release

17d ago

Major Versions

0.9.6 → 1.0.02022-02-12

1.x-dev → 2.0.02022-10-04

2.x-dev → 3.0.02023-03-25

3.x-dev → 4.0.02025-01-05

PHP version history (5 changes)0.1.0PHP ^7.4

0.5.0PHP ^8.0

1.0.0PHP ^8.1

4.0.0PHP ^8.3

4.0.6PHP ^8.5

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/6583519?v=4)[Herpaderp Aldent](/maintainers/herpaderpaldent)[@herpaderpaldent](https://github.com/herpaderpaldent)

---

Top Contributors

[![herpaderpaldent](https://avatars.githubusercontent.com/u/6583519?v=4)](https://github.com/herpaderpaldent "herpaderpaldent (459 commits)")[![dependabot-preview[bot]](https://avatars.githubusercontent.com/in/2141?v=4)](https://github.com/dependabot-preview[bot] "dependabot-preview[bot] (11 commits)")[![laravel-shift](https://avatars.githubusercontent.com/u/15991828?v=4)](https://github.com/laravel-shift "laravel-shift (7 commits)")[![StyleCIBot](https://avatars.githubusercontent.com/u/11048387?v=4)](https://github.com/StyleCIBot "StyleCIBot (1 commits)")

###  Code Quality

TestsPest

Static AnalysisPHPStan, Rector

Code StyleLaravel Pint

Type Coverage Yes

### Embed Badge

![Health badge](/badges/seatplus-auth/health.svg)

```
[![Health](https://phpackages.com/badges/seatplus-auth/health.svg)](https://phpackages.com/packages/seatplus-auth)
```

###  Alternatives

[nasirkhan/laravel-starter

A CMS like modular Laravel starter project.

1.4k2.7k](/packages/nasirkhan-laravel-starter)[unopim/unopim

UnoPim Laravel PIM

10.5k2.4k](/packages/unopim-unopim)[typicms/base

A modular multilingual CMS built with Laravel, enabling developers to manage structured content like pages, news, events, and more.

1.6k20.4k](/packages/typicms-base)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)