Telegram bot delivery channel for Laravel Rebel Channels: deliver OTP codes and security alerts to a Telegram chat. Part of padosoft/laravel-rebel-*.

Bird (formerly MessageBird) provider for Laravel Rebel Channels: phone verification via the Bird Verify API (SMS), plain SMS delivery, and signed delivery-status webhooks. Part of padosoft/laravel-rebel-*.

Pluggable anti-bot / CAPTCHA gate for Laravel Rebel: server-side verification of Cloudflare Turnstile, Google reCAPTCHA v3 and hCaptcha tokens, fail-closed by default and fully audited. Part of padosoft/laravel-rebel-*.

Vonage provider for Laravel Rebel Channels: phone verification via Vonage Verify (SMS/voice), plain SMS delivery, and signed delivery-receipt webhooks. Part of padosoft/laravel-rebel-*.

Meta-package for the padosoft/laravel-rebel-* enterprise authentication control plane: passwordless email-OTP, passkey-first, risk-based step-up with PSD2/SCA, channels, sessions, recovery, anomaly detection and a web admin panel — installs and ties the whole suite together.

Anomaly detection + AI security copilot for Laravel Rebel: deterministic rules detect anomaly cases; the optional AI only explains/suggests (sanitized prompts, no PII/OTP, human review). Part of padosoft/laravel-rebel-*.

High-assurance account recovery for Laravel Rebel: single-use HMAC-hashed recovery (backup) codes, generated once at enrolment, with anti-ATO checks. Part of padosoft/laravel-rebel-*.

Device/session registry for Laravel Rebel: session/device tracking, logout-everywhere, refresh-token rotation with reuse detection, and device trust. Part of padosoft/laravel-rebel-*.

Control-plane JSON API for Laravel Rebel: security metrics, audit-event explorer, OTP/step-up funnels, provider health, with permission-gated and tenant-scoped read models. Part of padosoft/laravel-rebel-*.

Twilio provider for Laravel Rebel Channels: phone verification via Twilio Verify (SMS/WhatsApp/voice), message delivery, and signed delivery-status webhooks. Part of padosoft/laravel-rebel-*.

Channel/provider abstraction (SMS/WhatsApp/voice) for Laravel Rebel: verification routing with fallback, cooldown, multi-dimensional rate limiting, and anti toll-fraud/IRSF defences. Part of padosoft/laravel-rebel-*.

Bridge between Laravel Fortify and Laravel Rebel: exposes password-confirm / passkey / TOTP as step-up drivers, maps Fortify events into the Rebel audit trail, and enables passkey-first login. Part of padosoft/laravel-rebel-*.

Step-up authentication for Laravel Rebel: confirm an action/purpose with AAL/AMR assurance, risk-based, and PSD2/SCA dynamic linking. Part of padosoft/laravel-rebel-*.

Web Admin Panel (Blade + AJAX + vanilla JS) for Laravel Rebel: a security operations dashboard over the Rebel Admin API. Part of padosoft/laravel-rebel-*.

Enterprise passwordless email-OTP login for Laravel Rebel: anti-enumeration, multi-dimensional rate-limiting, multi-tenant/purpose/risk, Sanctum token issuance. Part of padosoft/laravel-rebel-*.

Core primitives, value objects and contracts for Laravel Rebel: the enterprise authentication control plane (AAL/AMR assurance, security context, audit, Sanctum tokens, rate-limiting). The entry point of the padosoft/laravel-rebel-* ecosystem.

Device-bound login sessions for Laravel: per-device remember-me tokens, a "where am I signed in" device list, and revoke/rename — privacy-respecting and Fortify-agnostic.

Laravel package for Logto authentication and authorization

API key management for Laravel — attach API keys to any Eloquent model, authenticate requests via HMAC SHA-256, cache keys in Redis, and support stancl/tenancy v4 multi-tenant architectures.

Passwordless authentication for Laravel

Laravel admin starter with login by username, puzzle CAPTCHA and user management.

Multi-factor authentication for Laravel — TOTP compatible with Google Authenticator, Authy, and any RFC 6238 app.

A Laravel package for OTP-based authentication with full user management admin API.

Drop-in, config-driven authentication library for Laravel 12 and 13. Registration with OTP + magic-link email verification, login, refresh token rotation, password reset, multi-session management, device fingerprinting, Google OAuth, long-lived API tokens, account status workflow, and referral codes with anti-abuse detection — all through a single JSON API.

Laravel package for authn.sh — service provider, middleware, Blade directives, facade. Wraps authn-sh/sdk-php for Laravel 11+.

Password + session authentication for LaravelUi5 apps, with a UI5 frontend.

A premium Laravel starter package with custom authentication, role-based dashboards, and modern Tailwind-powered UI.

Headless authentication bridge for Laravel applications using Fortify and Sanctum

A WebAuthn (passkeys) backend API package for Laravel — API-first, action-based, and fully customizable.

A Laravel SDK for integrating with the Huwiya Identity Provider.

🔥 Advanced Security Package for Laravel 12 - The most comprehensive security solution for Laravel applications

RFC 9449 DPoP for Laravel — issues EC P-256-bound JWTs and verifies DPoP proofs on protected routes.

Laravel package for API key authentication

SPA-ready authentication API for Laravel with Sanctum (register, login, logout, email verification, password reset)

Laravel package for Asan İmza mobile authentication and digital signing via JSON-RPC 2.0 proxy API

User session tracking and device management for Laravel.

A professional Laravel API authentication package with Sanctum, device management, email verification, password reset and rate limiting.

Laravel package for integrating with Adamus IAM service for centralized authentication

A Laravel authentication guard for Keycloak OAuth2 resource servers with token introspection and optional caching support.

AWS IAM authentication for Laravel: RDS database connections and SDK credential caching for PHP-FPM

JWT and Project authentication middleware for Laravel with JWKS support

Core domain interfaces and entities for Gesmuni Auth - a mode-agnostic RBAC authentication library

Test authentication bypass for Laravel browser and API testing (Mink, Dusk, Behat)

Single Sign-On package for Sobiz applications using OAuth 2.0 + OIDC

Quick developer authentication for Laravel applications in local/staging environments

Laravel package untuk integrasi dengan SSO Mahulu (OAuth 2.0 Authorization Code Flow)

Simple Authentik Guard to Laravel Web Routes (Adapted of Laravel Keycloak Web Guard (Vizir))

Use Latvian eParaksts in your Laravel app.

Laravel OIDC Client package with PKCE support for SSO/SLO authentication

OTP-based passwordless email authentication for Laravel. No database tables required — codes stored in cache, identity in session.