paseto
Guzzle
Our great sponsors
paseto | Guzzle | |
---|---|---|
26 | 15 | |
3,188 | 22,984 | |
0.1% | 0.3% | |
4.7 | 6.8 | |
1 day ago | 16 days ago | |
PHP | PHP | |
GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
paseto
-
JSON Web Proofs
Might I suggest Paseto (https://paseto.io/) - it solves a lot of the headaches of JWT. Signing and encryption are two different things that require two different sets of keys, so you can't mess it up.
(Full disclosure, I've written one implementation: https://github.com/auth70/paseto-ts)
-
Full-stack authentication system using rust (actix-web) and sveltekit
Though we'll be building a session-based authentication system, it's noteworthy that with the introduction of some concepts which will be discussed in due time, you can turn it into JWT- or, more securely and appropriately, PASETO-based authentication system.
- Biscuit 3.0
-
Securing Your Golang Application: Unleashing the Power of Authentication and Authorization
Time we ditch it and use paseto
- Paseto is everything you love about JWT without any of the design deficits
- Why JWTs Suck as Session Tokens (2017)
-
Looking for advice for Go Backend REST API for a Front End React/NodeJS
The PASETO web site goes over it. Mostly it's designed to make you do things the right way and avoid all the security holes you can fall into with JWT.
- Initial impact report about this week's EdDSA Double-PubKey Oracle attack in 40 affected crypto libs
-
Stop Storing Authentication Tokens in JS-accessible Storage
If this is too much to handle, you shouldn't have to! There's already solutions that handle it for you
Guzzle
-
Open Source Projects You Can Lay Your Hand On
Guzzle is a PHP HTTP client library. It’s a simple and effective solution for sending HTTP requests and managing HTTP/1.1 and HTTP/2.0 responses. This versatile tool excels in several areas, allowing developers to build query strings quickly, send POST requests, upload JSON data, and handle other HTTP-related tasks. Moreover, Guzzle facilitates both synchronous and asynchronous request handling, providing flexibility for different scenarios.
-
What GraphQL client package are you using?
Symfony HTTP Client or Guzzle. If new build then Symfony, but have a lot of existing implementations with Guzzle. Both have worked very well. Worst case fallback to cURL.
-
How to integrate Microsoft Graph API into Symfony?
but if you'd rather make raw requests, guzzle is a good option (though I'd opt for the sdk): https://github.com/guzzle/guzzle
-
PHP, REST API and Mikrotik Routers
PHP has built-in cURL support, but I never use it. I like using Guzzle or Symfony's http-client.
-
Why is the cURL package missing libz?
I just ran into multiple errors regarding the pre-packaged cURL: It does not feature accepting compressed responses (which I suppose is due to absense of `libz` being compiled/linked in).
- CVE-2022-29248 for guzzlehttp/guzzle: Cross-domain cookie leakage
- GitHub - guzzle/guzzle: Guzzle, an extensible PHP HTTP client
-
Queues vs Schedule to monitor websites
I am busy building a small application that monitors websites using guzzle. My idea is to run through the list of websites alphabetically and make a guzzle request to each and update my table with the http response codes of each site.
- How do you test your code ?
-
API Client Design Across Languages - Part 2 - Making Requests
Like Node.js, the PHP ecosystem has quite a number of good HTTP request libraries. Guzzle is perhaps one of the most well known, but there are many other popular libraries out there. Luckily, PHP also has some interface standards around HTTP clients and messages, particularly PSR-7, PSR-17, and PSR-18,
What are some alternatives?
branca - :key: Secure alternative to JWT. Authenticated Encrypted API Tokens for Go.
Requests - Requests for PHP is a humble HTTP request library. It simplifies how you interact with other sites and takes away all your worries.
Symfony Panther - A browser testing and web crawling library for PHP and Symfony
HTTPFul - A Chainable, REST Friendly, PHP HTTP Client. A sane alternative to cURL.
wp-graphql-jwt-authentication - Authentication for WPGraphQL using JWT (JSON Web Tokens)
Buzz - PHP's lightweight HTTP client
Ory Hydra - OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.
PHP VCR - Record your test suite's HTTP interactions and replay them during future test runs for fast, deterministic, accurate tests.
php-jwt - PHP package for JWT
zend-diactoros
bubble - bubble 旨在为项目快速开发提供一系列的基础能力,方便使用者根据项目需求快速进行功能拓展。已将所有 JAR 包都推送至中央仓库,也会为每个版本的升级改动列出详细的更新日志
HTTPlug - HTTPlug, the HTTP client abstraction for PHP