hmacauth/laravel-hmac-auth

HMAC API authentication for Laravel with signature verification, replay attack prevention, and rate limiting
laravel api security authentication middleware nonce hmac signature octane rate-limiting replay-attack request-signing
Install
composer require hmacauth/laravel-hmac-auth
Latest Version:v1.0.0
PHP:^8.3
License:MIT
Last Updated:Jun 22, 2026
Links: GitHub  ·  Packagist
Maintainer: rickeysxhemz

Laravel HMAC Authentication

Tests Packagist Version Downloads License

HMAC-based API authentication for Laravel 11/12.

Install

composer require hmacauth/laravel-hmac-auth
php artisan hmac:install
php artisan migrate
php artisan hmac:generate

Protect Routes

Route::middleware('hmac.verify')->group(function () {
    Route::post('/api/resource', ResourceController::class);
});

Documentation

See docs/ for full documentation:

Requirements

  • PHP 8.3+
  • Laravel 11.x / 12.x
  • Redis

License

MIT

Related Packages

delatbabel/apisecurity

API Security Helpers.

81,489 11
api key laravel nonce security sign signature
milenmk/laravel-rate-limiting

Advanced rate limiting package for Laravel with exponential backoff, custom mess...

1,221 9
authentication backoff laravel rate-limiting security throttling
auth0/login

Auth0 Laravel SDK. Straight-forward and tested methods for implementing authenti...

5,503,577 274
api auth auth0 authentication authorization json web key json web token jwk jwt laravel login oauth openid protect secure
moesif/moesif-laravel

Moesif Collection/Data Ingestion Middleware for Laravel

71,098 10
api debugging laravel log logging middleware moesif
rinvex/laravel-authy

Rinvex Authy is a simple wrapper for Authy TOTP, the best rated Two-Factor Authe...

77,843 32
authentication authy automated call laravel message phone register rinvex security sms token twofactor verification