PHP Authentication

Open-source PHP projects categorized as Authentication

Top 23 PHP Authentication Projects

  • jwt-auth

    🔐 JSON Web Token Authentication for Laravel & Lumen

    Project mention: Generate and verify JSON Web Tokens simply with Little JWT | | 2022-03-01

    First, thank you to everyone who contributed to Tymon's JWT Auth library. I found there were various issues with it (lasagna code, having to extend/override existing functionality, lack of functionality, etc.) that made it challenging to work with, which is what inspired me to create Little JWT.

  • OAuth 2.0 Client

    Easy integration with OAuth 2.0 service providers.

    Project mention: The PHPer's Guide to OAuth | | 2022-11-21

    For the client side, I'll be using the library league/oauth2-client.

  • Cloudways

    Cloudways BFCM Deal - 40% Off + 30 Free Migrations. Grow your online presence this BFCM with Cloudways using the promo BFCM4030 to get a FLAT 40% OFF on all our plans for 4 months. Also, enjoy up to 30 free migrations using the same promo. So go live in minutes and enjoy relentless online growth with our Managed Cloud Hosting Platform.

  • laravel-auth

    Laravel 8 with user authentication, registration with email confirmation, social media authentication, password recovery, and captcha protection. Uses offical [Bootstrap 4]( This also makes full use of Controllers for the routes, templates for the views, and makes use of middleware for routing. The project can be stood up in minutes.

  • LexikJWTAuthenticationBundle

    JWT authentication for your Symfony API

    Project mention: Symfony 6 and LexikJWTAuthenticationBundle 2: JSON Web Token (JWT) Auth | | 2022-11-11

    LexikJWTAuthenticationBundle 2

  • HWIOAuthBundle

    OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.

  • huge

    Simple user-authentication solution, embedded into a small framework.

    Project mention: What are the more unknown frameworks you ever used? | | 2022-02-17

    Panique's Huge, probably this 2.0-beta release from 2013.

  • Sentinel

    A framework agnostic authentication & authorization system. (by cartalyst)

    Project mention: Weekly help thread | | 2022-03-14

    Github: Documentation:

  • SonarLint

    Clean code begins in your IDE with SonarLint. Up your coding game and discover issues early. SonarLint is a free plugin that helps you find & fix bugs and security issues from the moment you start writing code. Install from your favorite IDE marketplace today.

  • Halite

    High-level cryptography interface powered by libsodium

    Project mention: Sodium encryption and digital signing made simple | | 2022-04-05

    Sounds like What does this do better?

  • simplesamlphp

    SimpleSAMLphp is an award-winning application written in native PHP that deals with authentication.

    Project mention: D7 to D10 | | 2022-09-16 is one issue we flagged while evaluating D10. This will prevent hundreds of Drupal using universities from being able to upgrade to D10.

  • PHP-Auth

    Authentication for PHP. Simple, lightweight and secure.

    Project mention: Weekly help thread | | 2022-03-14
  • google2fa-laravel

    A One Time Password Authentication package, compatible with Google Authenticator for Laravel

    Project mention: 2fa type - package? any recommendation | | 2022-09-07

    But even looking at Laravel specific options, one of the first few results that comes up is antonioribeiro/google2fa-laravel. I haven't looked too much into it. But from a quick glance I see over 700 stars, and that same author has a generic PHP implementation with over 1.5k stars.

  • two-factor

    Two-Factor Authentication for WordPress.

  • OpenID-Connect-PHP

    Minimalist OpenID Connect client

  • PermissionManager

    Admin interface for managing users, roles, permissions, using Backpack CRUD

  • multiotp

    multiOTP open source strong two factor authentication PHP library, OATH certified, with TOTP, HOTP, Mobile-OTP, YubiKey, SMS, QRcode provisioning, etc.

    Project mention: Is there an Authenticator/2FA/MFA app available for Palm? | | 2022-03-30

    If you're after a TOTP client (like Google Authenticator) then I haven't found one. Mobile-OTP generates a hashed PIN, and works if you build out your own Mobile-OTP infrastructure - the client is at, and the library you'll need to build your own integrations is at

  • Aura.Auth

    Provides a unified interface to local and remote authentication systems.

  • TwoFactor

    Two-Factor Authentication for all your users out-of-the-box.

    Project mention: I hate 2FA, so I made a package... | | 2022-05-26

    The package is Laragear/TwoFactor. It's a modern rewrite of my old 2FA package, but with better support.

  • passwords-evolved

    WordPress password authentication for the modern era

    Project mention: How to develop OOP plugins for WordPress without using the Singleton Pattern? | | 2022-11-05

    He also wrote this plugin which I think serves as an interesting example of oop in wp: The event management/subscribers concept in particular caught my as it is reminiscent of the symfony event dispatcher component.

  • user_saml

    :lock: App for authenticating Nextcloud users using SAML

    Project mention: Possible to remove username/password option from login page? | | 2022-05-31

    Just be careful with some SSO plugins like the SAML they still allow access directly via urls like https:///login?direct=1see: user_saml #284

  • AAuth

    Hierarchical Rol-Permission Based Laravel Auth Package with Limitless Hierarchical Level of Organizations

    Project mention: Our new Laravel Auth Package | | 2022-06-28
  • pfsense-saml2-auth

    A SAML2 authentication extension for the pfSense UI

    Project mention: SAML/SSO Authentication for OPNSense | | 2022-09-16

    I've found a SAML integration for pfSense on Github (, but I don't think custom third party plugins will simply "work" in OPNSense.

  • laravel-fortify-demo

    Demo of Laravel authentication using Fortify

  • otp-auth

    The OTP Auth package allows you to authenticate with one time password access (OTP)

  • Zigi

    Close all those tabs. Zigi will handle your updates.. Zigi monitors Jira and GitHub updates, pings you when PRs need approval and lets you take fast actions - all directly from Slack! Plus it reduces cycle time by up to 75%.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2022-11-21.

PHP Authentication related posts


What are some of the best open-source Authentication projects in PHP? This list will help you:

Project Stars
1 jwt-auth 10,681
2 OAuth 2.0 Client 3,361
3 laravel-auth 2,796
4 LexikJWTAuthenticationBundle 2,339
5 HWIOAuthBundle 2,196
6 huge 2,132
7 Sentinel 1,419
8 Halite 1,063
9 simplesamlphp 947
10 PHP-Auth 941
11 google2fa-laravel 768
12 two-factor 582
13 OpenID-Connect-PHP 465
14 PermissionManager 443
15 multiotp 234
16 Aura.Auth 125
17 TwoFactor 101
18 passwords-evolved 90
19 user_saml 83
20 AAuth 22
21 pfsense-saml2-auth 20
22 laravel-fortify-demo 14
23 otp-auth 8
Truly a developer’s best friend
Scout APM is great for developers who want to find and fix performance issues in their applications. With Scout, we'll take care of the bugs so you can focus on building great things 🚀.