ulcuber/laravel-passport-introspection

This repository provides a service written in Rust that validates access tokens issued by Laravel Passport, which is a PHP framework for OAuth 2.0 authentication. When a user logs into an application, the server gives them a token. Other parts of the system need to check if that token is still valid before allowing the user to perform actions. This service performs that check. It examines the token contents and connects to the Laravel database to see if the token has been revoked. The project is designed to sit between a web traffic manager like Nginx and the application servers that handle user requests. When a request comes in, the traffic manager asks this service whether the attached token is valid. The service replies with details about the token, such as the user and the scope of access. The traffic manager then passes those details along to the application servers. This setup means the application servers do not have to handle the cryptography and database checks themselves, which speeds up the overall system. The README reports high throughput, with the service handling over one hundred thousand requests per second on its own. It offers three endpoints for checking tokens, including one that follows the 2015 OAuth 2.0 Token Introspection standard. A non-standard endpoint is provided specifically for Nginx, which uses headers instead of a response body to make the process faster. The project also supports the EdDSA algorithm for modern security and smaller token sizes. Beyond the standard HTTP service, the repository includes versions that communicate over Unix sockets. This allows components inside the same server or container to talk to each other without the overhead of network protocols. There is also a proxy mode that can inspect tokens and route requests to different application servers. Integration examples are provided for Nginx, while support for Kubernetes, Traefik, and HAProxy is listed as planned. The full README is longer than what was shown.