Requirements

• PHP 8.4+
• Laravel 12 or 13
• ext-json, ext-openssl, plus ext-bcmath and ext-mbstring (required transitively by qr-for-laravel and its money-for-laravel dependency)
• An RSA key pair for jwt-for-laravel (php artisan jwt:generate-keys)
• A cache store with atomic locks (rate limits, re-authentication markers, the jti denylist)
• A mail transport, and a real queue for notifications.delivery = queue
• Laravel’s TrustProxies configured when behind a proxy (IP-keyed limits read $request->ip())
• app.timezone = UTC is recommended (stored times follow the app timezone)

Composer installs the Roundly building blocks it composes: jwt-for-laravel, refresh-tokens-for-laravel, two-factor-for-laravel, passkeys-for-laravel, crypto-for-laravel, qr-for-laravel, enums-for-laravel and package-toolkit-for-laravel.