Open-source security libraries for PHP

The documentation of each library: what it does, the specifications it implements, how to install it and where to ask about it.

Documentation sites

Authorization Access Control Framework Authorization for PHP and Symfony: decides whether a requester is allowed to perform an action on a subject. spomky-labs/access-control-framework Tokens JWT Framework JSON Web Tokens for PHP and Symfony: signature (JWS), encryption (JWE) and keys (JWK). web-token/jwt-framework Authentication WebAuthn Framework WebAuthn and passkeys for PHP and Symfony. web-auth/webauthn-framework Progressive web apps PHPWA Progressive web apps for Symfony: manifest, service worker and offline support. spomky-labs/pwa-bundle Notifications Web Push Web push notifications for PHP and Symfony. spomky-labs/web-push

Documented in their repository

One-time passwords OTPHP TOTP and HOTP one-time passwords, after RFC 6238 and RFC 4226. spomky-labs/otphp Encoding CBOR PHP CBOR encoding and decoding. spomky-labs/cbor-php Signature and encryption COSE COSE signing, encryption and key management. web-auth/cose-lib Certificates PKI Framework X.509 certificates, ASN.1 and public key infrastructure. spomky-labs/pki-framework