Laravel Forge provides seamless management of Composer authentication credentials through the “http-basic” configuration in your server or site’s auth.json file. These credentials are securely stored and automatically applied to your Composer operations.
Server-level Composer credentials are shared across all sites running under the same Ubuntu user account. For instance, if you have multiple sites deployed under the forge user, they’ll all have access to the same globally stored credentials located at ~/.config/composer/auth.json.To manage server-level credentials, navigate to your server’s dashboard, select the “PHP” tab, then click the “Composer” sidebar item.
Site-level credentials apply exclusively to individual sites, providing granular control when different sites require unique authentication for the same packages. This is particularly useful when multiple sites under the same user need different access permissions or licensing.To manage site-level credentials, navigate to your site’s dashboard, select the “Settings” tab, then click the “Composer” sidebar item.
To add new Composer credentials, navigate to the appropriate Composer management page and click the “Add credential” button. Complete the required fields and click “Add credential” to save:
Repository URL: The URL Composer uses to match credentials with the corresponding package provider
Username: Typically an email address or unique identifier required by the package provider
Password: The associated password or license key for authentication
To modify existing credentials, navigate to the appropriate Composer dashboard, locate the credential you want to update, open its dropdown menu, and select “Edit”. Make your changes and save the updated information.
To delete credentials, navigate to the appropriate Composer dashboard, locate the credential you want to remove, open its dropdown menu, select “Delete”, and confirm the removal when prompted.
