Download the PHP package ikechukwukalu/sanctumauthstarter without Composer

SANCTUM AUTH STARTER

This is a very flexible and customisable laravel package (boilerplate) that utilises laravel/ui and laravel-sanctum to create Basic Authetication classes and other helpful functionalities to give you a quick start when building REST APIs using Laravel. The following functionalities are made available:

• User registration
• User login
• Auto login after registration
• Login throttling
• Login 2FA
• Social media login
• Forgot password
• Email verification
• Resend email verification
• Reset password
• Change password
• Edit user profile
• Notifications
  • Welcome notification
  • Email verification
  • Login notification
  • Password change notification
• Generate documentation
• Helper CI/CD files for GitHub

REQUIREMENTS

• PHP 8+
• Laravel 9+

STEPS TO INSTALL

• php artisan ui bootstrap
• npm install --save-dev laravel-echo pusher-js
• Uncomment use Illuminate\Contracts\Auth\MustVerifyEmail; in User model class
• Add two_factor columns to the fillable and hidden arrays within the User model class. At the end the User should look similar to this:

GENERATE AUTH CONTROLLERS, REQUESTS, SERVICES AND ROUTES

You can run php artisan sas:setup to generate them at once. You can also call generate them separately:

• php artisan sas:controllers
• php artisan sas:routes
• php artisan sas:tests

PUBLISH MIGRATIONS AND CONFIG

• php artisan vendor:publish --tag=sas-migrations
• php artisan vendor:publish --tag=sas-config

WEBSOCKETS AND QUEUES

This package utilizes laravel beyondcode/laravel-websockets to pass access_token to the client after authentication. First, you must setup your laravel app for broadcasts. In order to do that run the following:

• php artisan vendor:publish --provider="BeyondCode\LaravelWebSockets\WebSocketsServiceProvider" --tag="migrations"
• php artisan vendor:publish --provider="BeyondCode\LaravelWebSockets\WebSocketsServiceProvider" --tag="config"
• Set REDIS_CLIENT=predis and BROADCAST_DRIVER=pusher within your .env file.
• Your laravel-echo config should look similar to this:

You will need a queue worker for the notifications and other events.

• Set QUEUE_CONNECTION=redis within your .env file.
• Uncomment App\Providers\BroadcastServiceProvider::class in config\app.php

• Your .env should look similar to this

• For SSL using apache. The snippet below should be placed within the virtualhost SSL config.

• Run php artisan config:clear, php artisan migrate, php artisan websockets:serve and php artisan queue:work
• php artisan serve
• npm install && npm run dev

WEBVIEW LOGINS

• Social media login
• Two-factor login

Social Media Login

Add the following to your config/services.php file.

• Navigate to auth/socialite to view a sample Google sign-up/sign-in page to view the generated access_token after sign up. Uncomment the route within the web.php. Below is the script that is called within the view resources/views/vendor/sanctumauthstarter/socialite/auth.blade.php.

• After a successful authentication, this view is displayed resources/views/vendor/sanctumauthstarter/socialite/callback.blade.php and it contains the following script:

Two-factor Login

This package utilizes Laragear/TwoFactor to power 2fa login and beyondcode/laravel-websockets to pass access_token to the client after authentication.

2fa authentication has been implemented for both password login and social media login.

• php artisan vendor:publish --provider="Laragear\TwoFactor\TwoFactorServiceProvider"
• php artisan migrate

• Replace the form in resources/views/vendor/two-factor/login.blade.php with the code below:

• Call api/create-two-factor to create 2fa.

• Call api/confirm-two-factor to confirm 2fa and get recovery codes.

• Call api/disable-two-factor to disable 2fa, api/current-recovery-codes to retrieve current recovery codes and api/new-recovery-codes to generate new recovery codes which replaces the previous batch.

Two factor enabled for password login

When 2fa has been enabled and a user attempts to login, a payload would be returned that contains a user_uuid and a twofactor_url.

The user_uuid is used to create a laravel-echo channel that would listen to a laravel broadcast. Navigate to auth/twofactor/{email}/{uuid} to view the generated access_token after uncommenting the route within the web.php. This view resources/views/vendor/sanctumauthstarter/twofactor/auth.blade.php contains a sample javascript that works it out.

Two factor enabled for social media login

When 2fa has been enabled a 2fa page will pop up over your browser.

DOCUMENTATION

To generate documentation:

• composer require --dev knuckleswtf/scribe
• php artisan vendor:publish --tag=scribe-config
• Change 'prefixes' => ['api/*'] to 'prefixes' => ['*'] if you want to see the docs for APIs for the web.php as well.
• php artisan scribe:generate

Visit your newly generated docs:

• If you're using static type, find the docs/index.html file in your public/ folder and open it in your browser.
• If you're using laravel type, start your app (php artisan serve), then visit /docs.

example_languages: For each endpoint, an example request is shown in each of the languages specified in this array. Currently, only bash (curl), javascript(Fetch), php (Guzzle) and python (requests) are included. You can add extra languages, but you must also create the corresponding Blade view (see Adding more example languages).

Default: ["bash", "javascript"]

Please visit scribe for more details.

TESTS

It's recommended that you run the tests before you start adding your custom models and controllers. Make sure to keep your database/factories/UserFactory.php Class updated with your users table so that the Tests can continue to run successfully.

Passwords

The passwords created within the database/factories/UserFactory.php Class must match the validation below:

Running Tests

• php artisan test

RECOMMENED PACKAGES

• ikechukwukalu/makeservice

• ikechukwukalu/databasebackup

• ikechukwukalu/requirepin

• ikechukwukalu/clamavfileupload

PUBLISH VIEWS

• php artisan vendor:publish --tag=sas-views

PUBLISH LANG

• php artisan vendor:publish --tag=sas-lang

PUBLISH LARAVEL EMAIL NOTIFICATIONS BLADE

• php artisan vendor:publish --tag=laravel-notifications

PUBLISH GITHUB WORKFLOWS

• php artisan vendor:publish --tag=github

LICENSE

The SAS package is an open-sourced software licensed under the MIT license.