Download the PHP package mixudev/laravel-authentication without Composer
On this page you can find all versions of the php package mixudev/laravel-authentication. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download mixudev/laravel-authentication
More information about mixudev/laravel-authentication
Files in mixudev/laravel-authentication
Package laravel-authentication
Short Description Production-grade, modular, portable, and secure authentication package for Laravel applications.
License MIT
Informations about the package laravel-authentication
Enterprise Authentication Package for Laravel
Arsitektur autentikasi enterprise siap produksi, modular, portable, dan aman (secure-by-default) untuk aplikasi Laravel 12.x dan 13.x.
Dirancang untuk monolit web, REST API, SPA, maupun arsitektur multi-tenant tanpa perlu modifikasi pada core code aplikasi host.
Security Defense Integration
Connect authentication events to enterprise threat detection & SIEM:
Wires 12 auth events (login, lockout, 2FA, device, password, session) into real-time threat correlation, IP quarantine, and multi-channel alerting. See integration guide.
Ringkasan Fitur Utama
| Modul & Fitur | Deskripsi Singkat |
|---|---|
| Passkey (FIDO2 / WebAuthn) | Login tanpa kata sandi via Touch ID, Face ID, Windows Hello, atau Security Key dengan dukungan autofill Conditional UI. |
| Multi-Factor Auth (2FA / TOTP) | Engine TOTP RFC 6238 mandiri (Google Auth, Authy, 1Password), kode pemulihan cadangan, dan fitur Trust This Device (30 hari). |
| Optimasi Skala 10M+ Data | Smart Fast-Path Credential Resolver dan Composite Indexing untuk performa pencarian < 1ms pada tabel puluhan juta baris. |
| Active Session & Device Manager | Deteksi platform/browser/IP, pencabutan sesi jarak jauh, dan Logout All Other Devices dengan konfirmasi password. |
| Granular Rate Limiting | Throttle counter independen per fitur (login, registration, otp, 2fa, forgot_password) mencegah cross-feature DoS. |
| Adaptive CAPTCHA & Bot Protection | Cloudflare Turnstile, Google reCAPTCHA v2/v3, dan hCaptcha dengan threshold otomatis (muncul setelah $N$ kali gagal). |
| OAuth Social Login | Autentikasi instan Google dan GitHub dengan layout modern yang sejajar dan responsif. |
| Passwordless OTP Email | Kode verifikasi sekali pakai kriptografis dengan limit percobaan dan auto-expiry. |
| Dual UI Template & Dark Mode | Template split (2 kolom) & card (kartu minimalis) dengan transisi mulus light, dark, dan auto (OS match). |
| 100% REST API Ready | Semua alur autentikasi tersedia dalam format JSON stateless (/api/v1/auth/*) dengan token Sanctum. |
Panduan Instalasi Cepat
1. Instalasi via Composer
Dependency matrix
The package's Composer dependencies are installed automatically by the command above. The following integrations are optional and are required only when their feature is enabled:
| Feature | Required package / service | Install or setup |
|---|---|---|
| Web login, registration, password reset, OTP, 2FA, sessions | Laravel application with database, cache, session, mail, and queue configuration | Included in Laravel; run package migrations |
| API bearer tokens | laravel/sanctum and HasApiTokens on the configured user model |
composer require laravel/sanctum; configure auth:sanctum |
| Social login | laravel/socialite |
composer require laravel/socialite; configure Google/GitHub credentials |
| CAPTCHA | Turnstile, reCAPTCHA, or hCaptcha account | Configure provider keys in .env only when CAPTCHA is enabled |
| Passkey / WebAuthn | HTTPS outside localhost and a browser with WebAuthn support | No extra Composer package; configure RP/origin correctly |
| QR code for TOTP setup | chillerlan/php-qrcode |
Installed as a required Composer dependency |
| Asynchronous email or audit persistence | A configured Laravel queue backend and a running worker | php artisan queue:work --queue=default,auth-audit |
| Redis rate limiting / queue / cache | Redis extension or a supported Redis client, depending on the Laravel setup | Optional; use database/file cache for development if suitable |
The package does not require Sanctum, Socialite, CAPTCHA, Redis, or a queue worker for every installation. Install and configure only the integrations used by the enabled features. API token flows fail closed without Sanctum instead of returning unusable tokens; social routes fail closed with an installation message when Socialite is missing.
[!NOTE] Untuk instalasi lokal / path repository (Monorepo), tambahkan repository path pada
composer.jsonaplikasi Anda lalu jalankancomposer require mixudev/laravel-authentication:@dev.
2. Setup Otomatis Satu Langkah (Direkomendasikan)
Jalankan perintah installer interaktif untuk mempublikasikan konfigurasi, migrasi, dan menyuntikkan class Tailwind CSS secara otomatis:
Atau jalankan manual jika ingin kontrol penuh:
Panduan Update Versi Baru
Ketika package merilis pembaruan versi (bugfix, fitur baru, atau peningkatan performa), lakukan langkah berikut pada aplikasi Anda:
[!TIP] Jika Anda menggunakan Mode Single-Folder Module (
modules/Authentication/), Anda dapat memperbarui modul dengan menjalankanphp artisan authentication:install-module --force.
Ringkasan Konfigurasi (config/authentication.php)
Pusat Dokumentasi Lengkap (docs/)
Dokumentasi teknis mendalam telah disusun rapi di dalam direktori docs/:
- 1. Instalasi & Setup Lengkap — composer → publish → migrate → Tailwind → verifikasi
- 2. Prerequisites & API Keys — kredensial CAPTCHA, OAuth, SMTP + checklist produksi
- 3. Mode Modul Mandiri (Single-Folder)
- 4. Penjelasan Lengkap Fitur & Saklar Konfigurasi
- 5. Passkey FIDO2 / WebAuthn
- 6. Custom Controller Guide
- 7. Custom Authentication Strategies
- 8. Events & Listeners
- Bahasa Indonesia
- 10. Katalog Lengkap REST API + Sitemap 49 Rute
- 11. Keamanan & Mitigasi Ancaman Siber
- 12. Hardening Notes (SA-01..SA-13)
- 13. Panduan Rilis & Standar Versioning
Standar Keamanan & Kode
- Zero Hardcoded Coupling: Tidak ada ketergantungan langsung ke
App\Models\User. Semua integrasi menggunakan dependency injection dan konfigurasi terpusat. - Sensitive Parameter Redaction: Semua argumen password dan secret menggunakan atribut
#[SensitiveParameter]PHP 8.2+ untuk mencegah kebocoran pada log dan error stack trace. - Fail-Closed by Design: Setiap anomali strategi atau channel yang tidak dikenali melempar explicit typed exceptions (
AuthenticationException). - Proteksi User Enumeration: Timing serangan enumerasi dinormalisasi agar waktu respons kredensial valid dan tidak valid bernilai konsisten.
- Pengujian Otomatis: Dilengkapi dengan unit & feature tests PHPUnit serta static analysis PHPStan Level 8.
Lisensi
Package ini dirilis di bawah lisensi open-source MIT License.
All versions of laravel-authentication with dependencies
chillerlan/php-qrcode Version ^5.0
illuminate/auth Version ^11.0 || ^12.0 || ^13.0
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0
illuminate/database Version ^11.0 || ^12.0 || ^13.0
illuminate/events Version ^11.0 || ^12.0 || ^13.0
illuminate/http Version ^11.0 || ^12.0 || ^13.0
illuminate/support Version ^11.0 || ^12.0 || ^13.0
illuminate/validation Version ^11.0 || ^12.0 || ^13.0