Laravel Auth

Rich authentication logic and scaffoldings for your Laravel applications.

About Laravel Auth

In today's digital landscape, the authentication process for most web applications has evolved beyond basic username-password logins. Modern authentication systems must consider password strength, two-factor authentication, secure account recovery, and even passwordless login methods like Passkeys. Implementing a robust, secure, and maintainable authentication solution can be a challenging task, requiring significant effort and expertise.

This monorepo contains an authentication library, along with a collection of adapter packages that leverage the library, to deliver a comprehensive authentication framework for your applications.

Features

• Basic email-password or username-password based authentication.
• Passkey-based ("passwordless") authentication.
• Two factor authentication for password-based users (TOTP, Security Keys).
• Email verification, either directly after registration or manually.
• Sudo-mode, allowing the user to temporarily elevate their privileges and perform sensitive actions.
• Account recovery (requires the generation of recovery codes).
• A rich set of authentication events, such as MultiFactorChallenged, AccountRecoveryFailed, etc.

Adapters & Usage

To use this authentication library, you'll likely want to install an adapter package, which use the 'core' package internally. Here are some of the available adapter packages:

Creating your own adapter package

If you're looking to develop your own adapter, we recommend using the Bladebones adapter repository as a starting point, as it already contains all the necessary scaffolding in it's most barebones form (hence the name).

Testing

composer test

Changelog

Please see CHANGELOG for more information what has changed recently.

Contributing

Please see CONTRIBUTING for details.

Security

If you discover any security related issues, please email [email protected] instead of using the issue tracker.

This way, we can safely discuss and resolve the issue (within a reasonable timeframe), without exposing users to the unnecessary additional risk. Once the issue is fixed and a new version is released, we'll make sure to credit you for your contribution (unless you wish to remain anonymous).

License

The MIT License (MIT). Please see License File for more information.