API Keys
composer require langsys/laravel-api-keys Standalone API-key authentication for Laravel. Hashed-at-rest keys, read/write scopes, per-key permissions, lifecycle events, and a drop-in authentication middleware. No other Langsys package is required — it works on its own, and integrates cleanly with Access Guard when you want entity-scoped authorization on top.
In this package
Section titled “In this package” Installation Composer, guarded migrations, and the optional config. Creating keys Plaintext once, sha256 at rest, getByKey(). Protecting routes The api-key middleware, scopes, and X-Request-ID. IP-restricted writes ip_write keys, CIDR allow-lists, and the proxy warning. Extending the model Subclass hooks and the things that bite. Permissions Shared permissions table, enums, and default grants. Events Created, authenticated, activated, deactivated, deleted. Access Guard Keys as first-class authorization subjects. Testing composer test.