OpenID Connect for Laravel without a JOSE library: authorization code sign-in with PKCE, provider access tokens for an API (JWT checked against the issuer's JWKS), and group claims to follow — the application decides who the person is.

Stateless Keycloak for Laravel: an auth guard verifying realm access tokens with firebase/php-jwt (JWKS with key rotation, iss/aud/exp/typ), per-realm and per-client user resolution, a role middleware, a client and service tokens, a backend-for-frontend browser login kept in cookies, and a signing test fake. No server-side session.

SSO client for Laravel: Authorization Code + PKCE login, RS256/JWKS or signed userinfo token validation, user sync and back-channel Single Logout.

Central SSO identity provider for Laravel: Authorization Code + PKCE, RS256 JWT with JWKS and key rotation, one-time codes, and back-channel Single Logout webhooks.

Bring-your-own-IdP OAuth 2.1 resource server for the official laravel/mcp package: external token validation (JWT/JWKS + RFC 7662 introspection), RFC 8707 audience binding, scope enforcement, and RFC 9728 discovery.

JWT and Project authentication middleware for Laravel with JWKS support

Manage JSON Web Key Sets (JWKS) for your Laravel applications