auth-and-authorization

What problem does it solve?

This Skill provides comprehensive guidance and code examples for implementing secure authentication and fine-grained authorization within Laravel applications, ensuring only the right users can access the right resources.

Core Features & Use Cases

• Sanctum Authentication: Covers both SPA cookie-based authentication and API token authentication for various client types.
• Policies & Gates: Demonstrates how to define and enforce authorization rules at the model and action levels.
• RBAC Implementation: Details strategies for role-based access control, including enum-based roles and integration with spatie/laravel-permission.
• Frontend Integration: Shows how to share authentication status and permissions with Inertia.js frontends and perform checks there.
• Password Resets & Verification: Integrates with Laravel Fortify for headless password reset and email verification flows.
• Testing: Provides examples for unit and feature testing of authentication and authorization logic.

Quick Start

Implement Sanctum SPA authentication by configuring middleware and creating an authentication controller.