#Awesome PSR-15 Middlewares

PSR-15 HTTP Middleware describes a common standard for HTTP middleware components using HTTP Messages defined by PSR-7.

Currently, PSR-15 is a PHP Standards Recommendation of the Framework Interoperability Group (FIG).

Please read the contribution guidelines before contributing.

#Contents

• References
• Articles
• Packages

#References

• PHP Framework Interoperability Group website
• PSR-15 HTTP Middleware - The current standard.
• psr/http-server-middleware - Composer package of common interfaces for PSR-15 HTTP Middlewares.

#Articles

• PSR-7 Objects Are Not Immutable - Description of a serious flaw with the double-pass style of middlewares.
• Dependency Inversion and PSR-7 Bodies - Conclusion that double-pass flaws cannot be resolved without HTTP Factories.

#Packages

Every package is currently maintained. Any package without an update for 2-3 years is deleted.

#PSR-7 implementations

• laminas/laminas-diactoros
• guzlehttp/psr7
• slim/http
• nyholm/psr7
• sunrise/http-message
• httpsoft/http-message

#Dispatcher

• relay/relay - A PSR-15 request handler for both PSR-15 and callable middleware; use it with any framework or container.
• mindplay/middleman - Dead simple PSR-15 / PSR-7 middleware dispatcher.
• laminas/laminas-stratigility - Build and dispatch middleware pipelines.
• oscarotero/middleland - Another PSR-15 dispatcher
• httpsoft/http-runner - Running PSR-7 components and building PSR-15 middleware pipelines.

#Router

• middlewares/aura-router - Use Aura.Router.
• middlewares/fast-route - Use FastRoute.
• sunrise/http-router - HTTP Router based on PSR-7 and PSR-15
• jasny/switch-route - Generate a PHP script for faster routing
• httpsoft/http-router - Simple and fast HTTP request router providing PSR-7 and PSR-15.

#Security

• middlewares/cors - Manage Cross-Origin Resource Sharing (CORS).
• middlewares/csp - Manage Content-Security-Policies (CSP).
• middlewares/honeypot - Block spam bots.
• middlewares/http-authentication - HTTP Basic and Digest access authentication.
• middlewares/recaptcha - Use Google's reCAPTCHA for spam prevention.
• ellipsephp/cookie-encryption - Encrypt cookies with a key

#Session

• AuraSession - Manage sessions using Aura.Session.
• PhpSession - Manage sessions using PHP's native session API.
• Storageless JWT Session - Manage sessions without I/O usage (JWT).
• kodus/session - Manage sessions in a simple way without the use of PHP's native session handling.

#Errors management

• middlewares/whoops - Use Whoops as error handler.
• middlewares/error-handler - Handle errors with support for multiple formatters (HTML, JSON, XML, etc.).
• middlewares/json-exception-handler - Handle errors ideally for your API using JSON.
• middlewares/error-response - Easily create HTTP errors.

#Debugging

• middlewares/debugbar - Use PHP Debug Bar for your development environment.
• kodus/chrome-logger - A well-designed alternative to the original ChromeLogger for PHP.

#Content

• middlewares/encoder - Compress responses with gzencode or gzdeflate.
• middlewares/minifier - Minify Html, CSS and Javascript.
• middlewares/negotiation - Manage content negotiations.

#Miscellaneous

• middlewares/geolocation - Geolocate requests.

#Links of interest

• PSR-15 Middlewares by Middlewares Organization

#License

Awesome PSR-15 Middlewares © 2016-2025 by Middlewares Organization is licensed under Creative Commons Attribution 4.0 International.