Download the PHP package codificio/carpentree-core without Composer

Carpentree Core

Requirements

• PHP 7.2+
• Laravel 5.7+
• MySQL 5.7+ (this package use json column)
• exif extension (on most systems it will be installed by default).
• GD extension
• If you want to create PDF or SVG thumbnails Imagick and Ghostscript are required.
• For the creation of thumbnails of video files ffmpeg should be installed on your system.

Installation

• Via Composer

• IMPORTANT! Remove default Laravel migrations about users:

  • yyyy_mm_dd_HHiiss_create_users_table.php
  • yyyy_mm_dd_HHiiss_create_password_resets_table.php

• Run migrations

• Since the package uses Laravel Passport, you need to install it

• In your config/auth.php configuration file, you should set the driver option of the api authentication guard to passport.

• [Optional] If you want, remove default User model class in App/User.
• [Optional] If you want, remove no more useful Middleware and Controller. Remember this package aim to provide a stateless application skeleton, so default session authentication will not be used.

• In your config/auth.php configuration file, you should set the model option of the users provider to the new User class.

• Remove default Laravel routes from routes folder unless you need to override it. By default, Carpentree has a root route (and a view) for the index in order to initialize React app.

  Do not remove files because they will be useful to make your own application. Just remove its content before starting developing.

Usage

Authorization and authentication

CORS

CORS Middleware is base on https://github.com/barryvdh/laravel-cors.

CORS middleware is already included in api routes group.

In order to make your own configuration, publish CORS config file:

Note: When using custom headers, like X-Auth-Token or X-Requested-With, you must set the allowedHeaders to include those headers. You can also set it to array('*') to allow all custom headers.

Note: If you are explicitly whitelisting headers, you must include Origin or requests will fail to be recognized as CORS.

Note: Because of http method overriding in Laravel, allowing POST methods will also enable the API users to perform PUT and DELETE requests as well.

Enable social authentication

Add credentials for the OAuth services your application utilizes. These credentials should be placed in your config/services.php configuration file, and should use the key equals to provider name (e.g., facebook, google, github etc.).

For example:

We will use Socialite just for retrieving user details from an access token so we can fill client_id, client_secret, redirect with empty strings (not NULL) because they won’t be used in our flow.

Roles and permissions

There is a Super Admin role who can do everything. To make sure you correctly pass the check on this role, you must use the native Laravel @can and can() directives.

It is generally best to code the app around permissions only. That way you can always use the native Laravel @can and can() directives everywhere in your app.

Middleware

Since this package base his roles and permissions system on spatie\laravel-permission, if you want to use middlewares, you need to add them inside your app/Http/Kernel.php file.

Manage permissions

• Publish config file:

• Add permissions you want to the carpentree.permissions config file, e.g:

• Update your database by running the console command:

Permission final name will be group-key.permission-key adn you can refer to it from the code, for example, in this way:

Assign statuses to Eloquent models

We use laravel-model-status package by Spatie. Look at their documentation.

Assign categories to Eloquent models

To add categories support to your eloquent models simply use \Carpentree\Core\Traits\Categorizable trait.

For his feature, we were inspired by https://github.com/rinvex/laravel-categories. Read it documentation for more info.

Full text search

TODO (Algolia)

Meta fields

Assign HasMeta trait to a model in order to enable meta fields for a model. In order to maintain both flexibility and simplicity, you can consider value attributes of the meta fields as JSON container.

Localization

Publish configuration with this command:

After that, available locales are set in configuration file config\translatable.php.

Security

If you discover any security related issues, please email [email protected] instead of using the issue tracker.

License

MIT. Please see the license file for more information.