Repolode
Submit
tymondesigns

tymondesigns/jwt-auth

JWT authentication package for Laravel and Lumen that issues and validates JSON Web Tokens for API login.

View on GitHubWebsite
Stars
11,485
Forks
1,536
Open issues
612
Last commit
13 days ago

What is it?

jwt-auth is a PHP package that adds JSON Web Token (JWT) authentication to Laravel and Lumen applications. It is typically used to secure stateless APIs, where a client logs in once, receives a signed token, and sends that token with later requests instead of relying on server-side sessions.

The package is installed through Composer and works as a guard for Laravel's authentication system. It provides methods to create tokens for a user, validate incoming tokens, refresh them, and invalidate them, and it can be applied to routes through middleware.

The project's documentation is hosted at jwt-auth.com and covers installation, configuration, and usage details.

Key features

  • 01Issues signed JWTs for authenticated users in Laravel and Lumen.
  • 02Integrates with Laravel's auth guard system.
  • 03Supports token refresh and invalidation.
  • 04Provides middleware for protecting routes.

Use cases

  • Securing a stateless REST API built on Laravel.
  • Authenticating mobile or single-page app clients without server sessions.
  • Adding token-based login to an existing Lumen service.

In collections

Security scanners, audits & threat intel toolsLogin, SSO & identity servers

Topics

#authentication#jwt#laravel#php#api#security

FAQ

What is jwt-auth?
JWT authentication package for Laravel and Lumen that issues and validates JSON Web Tokens for API login. jwt-auth is a PHP package that adds JSON Web Token (JWT) authentication to Laravel and Lumen applications. It is typically used to secure stateless APIs, where a client logs in once, receives a signed token, and sends that token with later requests instead of relying on server-side sessions.
Is jwt-auth free to use? What license does it have?
jwt-auth is open source under the MIT license. Check the license terms before using it in commercial products.
Is jwt-auth still maintained?
Actively maintained. The last commit to jwt-auth was on Oct 24, 2026.
What can I use jwt-auth for?
Securing a stateless REST API built on Laravel. Authenticating mobile or single-page app clients without server sessions. Adding token-based login to an existing Lumen service.
Where can I get jwt-auth?
The source code and installation instructions are on GitHub: https://github.com/tymondesigns/jwt-auth

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects