Skip to content

v0.1.0

Choose a tag to compare

View all tags
@ScottHelme ScottHelme released this 16 May 12:14
v0.1.0
6bf620f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First tagged release of dbsc-php — a small, framework-agnostic PHP server library for Device Bound Session Credentials (DBSC), extracted from Report URI's production integration.

0.x — the public API may still change. The protocol/crypto logic is production-proven, but the packaging surface (RequestContext, DbscResponse, StoreInterface) has not yet been exercised by an external consumer; expect possible adjustments before v1.0.0.

Highlights

  • Pure HTTP-header DBSC server: ES256 JWT verification, registration/refresh state machine, enforcement-gate primitives.
  • Framework-agnostic — never touches superglobals, headers, or cookies; you map RequestContext ⇄ DbscResponse.
  • Pluggable StoreInterface (+ bundled InMemoryStore); zero runtime dependencies beyond ext-openssl/ext-json.
  • Wire-protocol corrections from real-browser integration baked in (see README → Wire-protocol notes).
  • Self-contained test harness (_test/run-tests.php, 22 checks) and reference front controller (_test/server.php).

See the README for the flow, the recommended enforcement gate, and the storage requirement.

Assets 2
Loading