PHPackages supaapps/platform93 - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. supaapps/platform93 ActiveLibrary supaapps/platform93 =================== Authentication and webhook integration for Platform93 v0.1.0-rc.3(yesterday)03↑1900%[1 PRs](https://github.com/supaapps/platform93/pulls)Apache-2.0GoPHP ^8.2CI passing Since Aug 8Pushed yesterdayCompare [ Source](https://github.com/supaapps/platform93)[ Packagist](https://packagist.org/packages/supaapps/platform93)[ Docs](https://github.com/supaapps/platform93)[ RSS](/packages/supaapps-platform93/feed)WikiDiscussions main Synced today READMEChangelog (4)Dependencies (3)Versions (8)Used By (0) Platform93 ========== [](#platform93) Platform93 is an Apache-2.0 self-hosted control plane for application identity, authorization, workspaces, billing, entitlements, transactional email, events, and outgoing webhooks, with optional S3-compatible light object storage. PostgreSQL is the only required runtime service. It keeps authoritative security and commercial state outside application code and exposes it through versioned APIs, events, and generated SDKs. Authorization uses strict relative permission keys, reusable roles, and optional identity-specific direct grants. See [application authorization](docs/authorization.md). > The control plane outside your app. Platform93 targets fresh installations and new contracts. It does not include legacy API adapters, source-database import, hosted end-user pages, CRM, marketing automation, or a generic application database. The repository is currently a development foundation, not a `v1.0.0` release. See [Release Readiness](docs/release-readiness.md) for implemented coverage and the gates that remain before a production tag. Repository ---------- [](#repository) - `cmd/platform93`: API, worker, dispatcher, migration, bootstrap, and recovery CLI. - `internal`: isolated Go domain and infrastructure modules. - `migrations`: explicit PostgreSQL schema history embedded in the binary. - `api/openapi`: canonical HTTP contract. - `schemas/events`: immutable event contracts. - `web`: statically exported administrator application embedded in the image. - `sdk`: supported TypeScript, PHP, Python, and Go integrations. - `deploy`: Docker Compose and production Helm packaging. Local Start ----------- [](#local-start) Create `postgres_password`, `database_url`, and `platform93_master_key` files in `deploy/compose/secrets`. The database URL uses the PostgreSQL password; the master key is the base64 representation of exactly 32 random bytes. ``` docker build -t platform93:dev . PLATFORM93_IMAGE=platform93:dev docker compose -f deploy/compose/compose.yaml up -d docker compose -f deploy/compose/compose.yaml run --rm api bootstrap ``` Open `http://localhost:8093` and consume the one-time bootstrap credential. Development ----------- [](#development) ``` pnpm install pnpm typecheck go test ./... pnpm --filter @platform93/admin build go build ./cmd/platform93 ``` Integration Packages -------------------- [](#integration-packages) - `@supaapps/platform93-sdk`: generated TypeScript API client. - `@supaapps/platform93-auth`: headless browser authentication and token storage adapters. - `@supaapps/platform93-expo`: Expo/React Native auth sessions with SecureStore-backed refresh credentials. - `@supaapps/platform93-react`: React provider and authentication hooks. - `@supaapps/platform93-server`: strict Node.js JWT/JWKS verification. - `@supaapps/platform93-events`: event contracts and webhook verification. - `supaapps/platform93`: Composer authentication/webhook package with optional Laravel guard. - `supaapps-platform93-auth`: Python verifier with FastAPI, Django, and Flask adapters. - `supaapps-platform93-webhooks`: Python webhook signature verification. - `github.com/supaapps/platform93/sdk/go`: Go authentication, machine-client, webhook, and direct-storage packages. Native applications can register exact custom-scheme callbacks on public clients; see [Native mobile authentication](docs/native-mobile-auth.md). Principles ---------- [](#principles) - Self-hosting is complete and never depends on a managed service. - Security boundaries deny by default and remain explicit in tokens and APIs. - Public behavior is contract-first and versioned. - Data is exportable and provider integrations remain replaceable. - Operations, migrations, backups, and diagnostics are product features. - The repository never contains deployment credentials or private application data. See [Architecture Principles](docs/architecture.md), [Platform User Authentication](docs/platform-user-authentication.md), [Application Configuration](docs/application-configuration.md), [Application And Workspace Invitations](docs/invitations.md), [Catalog And Entitlements](docs/catalog-entitlements.md), [Notification Templates](docs/notifications.md), [Provider Inheritance](docs/provider-inheritance.md), [Organization Management And Governance](docs/organization-management.md), [Events And Webhooks](docs/events-webhooks.md), [Optional Object Storage](docs/object-storage.md), [Migration From Supaapps Platform](docs/migrating-from-supaapps-platform.md), [Helm deployment](deploy/helm/platform93/README.md), [Upgrades](docs/upgrades.md), [Release process](docs/releasing.md), [v0.1.0 security review record](docs/security-review-0.1.0.md), [Contributing](CONTRIBUTING.md), and [Security Policy](SECURITY.md). License ------- [](#license) Apache License 2.0. See [LICENSE](LICENSE). ### Health Score 38 — LowBetter than 83% of packages Maintenance100 Actively maintained with recent releases Popularity4 Limited adoption so far Community6 Small or concentrated contributor base Maturity36 Early-stage or recently created project Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~2 days Total 5 Last Release 1d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/13707877?v=4)[Nawwar Elnarsh](/maintainers/SirNarsh)[@SirNarsh](https://github.com/SirNarsh) --- Top Contributors [![SirNarsh](https://avatars.githubusercontent.com/u/13707877?v=4)](https://github.com/SirNarsh "SirNarsh (29 commits)") ### Embed Badge ![Health badge](/badges/supaapps-platform93/health.svg) ``` [![Health](https://phpackages.com/badges/supaapps-platform93/health.svg)](https://phpackages.com/packages/supaapps-platform93) ``` ### Alternatives [symfony/symfony The Symfony PHP framework 31.4k87.4M2.2k](/packages/symfony-symfony)[google/auth Google Auth Library for PHP 1.4k302.1M240](/packages/google-auth)[tempest/framework The PHP framework that gets out of your way. 2.3k37.6k21](/packages/tempest-framework)[sylius/sylius E-Commerce platform for PHP, based on Symfony framework. 8.5k6.0M777](/packages/sylius-sylius)[shopware/platform The Shopware e-commerce core 3.4k1.5M3](/packages/shopware-platform)[typo3/cms TYPO3 CMS is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under GNU/GPL. 1.2k1.9M122](/packages/typo3-cms) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)