YorvoID's intent verifier: runs a privileged operation only after a passkey signed exactly that operation, checked against keys the verifier holds itself. Stands alone: no framework, no database layer. Part of YorvoID, identity and access management for PHP.
composer require yorvoid/intent-verifierIt stands alone: install it where the privileged operations run, next to no other YorvoID package. Read Signed intents, and the rest of the documentation.
This package is developed in yorvoid/yorvoid, in packages/intent-verifier; its own repository is a read-only copy. Please open issues and pull requests in yorvoid/yorvoid, and report vulnerabilities privately as the security policy describes.
Licensed under the Apache License 2.0; see also NOTICE.