hmacauth/laravel-hmac-auth

HMAC API authentication for Laravel with signature verification, replay attack prevention, and rate limiting
Install
composer require hmacauth/laravel-hmac-auth
Latest Version:v1.0.0
PHP:^8.3
Laravel:11 · 12
License:MIT
Last Updated:Jun 22, 2026
Links: GitHub  ·  Packagist
Maintainer: rickeysxhemz

Laravel HMAC Authentication

Tests Packagist Version Downloads License

HMAC-based API authentication for Laravel 11/12.

Install

composer require hmacauth/laravel-hmac-auth
php artisan hmac:install
php artisan migrate
php artisan hmac:generate

Protect Routes

Route::middleware('hmac.verify')->group(function () {
    Route::post('/api/resource', ResourceController::class);
});

Documentation

See docs/ for full documentation:

Requirements

  • PHP 8.3+
  • Laravel 11.x / 12.x
  • Redis

License

MIT

Related Packages

aporat/laravel-auth-signature

A Laravel package providing a middleware for validating API requests with HMAC-S...

2,102 1
delatbabel/apisecurity

API Security Helpers.

84,069 11
milenmk/laravel-rate-limiting

Advanced rate limiting package for Laravel with exponential backoff, custom mess...

2,151 10
custom-d/api-authentication

A api authentication

11,612
mpociot/reauthenticate

Reauthenticate users by letting them re-enter their passwords for specific parts...

35,953 301

Version History

Version Released PHP Laravel License
v1.0.0 ^8.3 ^11.0|^12.0 MIT