How jundayw/laravel-passport works
Laravel Passport is a lightweight API request-verification and response-signing package. An API client sends public parameters and a signature; the Laravel application collects configured values from headers, query parameters, or the body, resolves the application secret, and verifies the signature. The application can also build and sign responses using the same signer infrastructure. The README documents configurable parameters, algorithms, and Laravel integration. Wiring beyond the sampled files is shown only where documented; the main Passport implementation was not sampled.
Main entry points: src/Passport.php Passport API · Model/Passport.php Passport model · Facades/Passport.php Passport facade · PassportServiceProvider.php Service provider
Components 16
Laravel integration
- Passport facade
src/Facades/Passport.php - Service provider
src/PassportServiceProvider.php - Package config
config/passport.php
Request verification
- Passport API
src/Passport.php - Parameter collection
src/Support/HasArrayable.php - Public parameters
src/Support/HasArrayable.php
Signature engine
- Signer manager
src/Manager.php - Signer contract
src/Contracts/Signer.php - HMAC signer
src/Algorithms/HashHmacSigner.php
Credential storage
- Passport model contract
src/Contracts/Model/Passport.php - Passport model
src/Model/Passport.php - Credential table
database/migrations/2026_03_01_000000_create_passport_table.php
Other components
- API client
- Laravel application
- Laravel cache
- Laravel database
Connections 16
- API client → Laravel application: sends request
- Laravel application → Passport facade: uses package
- Passport facade → Passport API: resolves API
- Service provider → Passport facade: binds contract
- Service provider → Package config: merges config
- Passport API → Parameter collection: collects parameters
- Parameter collection → Public parameters: extracts values
- Passport API → Passport model contract: resolves secret
- Passport model contract → Passport model: implemented by
- Passport model → Laravel cache: caches lookup
- Passport model → Laravel database: queries credentials
- Credential table → Laravel database: defines schema
- Passport API → Signer manager: requests signer
- Signer manager → HMAC signer: creates driver
- HMAC signer → Signer contract: implements
- Passport API → API client: returns signed response