Download the PHP package padosoft/laravel-rebel-admin without Composer
On this page you can find all versions of the php package padosoft/laravel-rebel-admin. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download padosoft/laravel-rebel-admin
More information about padosoft/laravel-rebel-admin
Files in padosoft/laravel-rebel-admin
Package laravel-rebel-admin
Short Description Web Admin Panel (Blade + AJAX + vanilla JS) for Laravel Rebel: a security operations dashboard over the Rebel Admin API. Part of padosoft/laravel-rebel-*.
License MIT
Homepage https://github.com/padosoft/laravel-rebel-admin
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-rebel-admin
Laravel Rebel — Web Admin Panel
Official documentation: https://doc.laravel-rebel.padosoft.com
A security-operations dashboard for your auth stack. A clean Blade + vanilla-JS panel that hydrates entirely from the Rebel Admin API: security overview, OTP/step-up funnels, channels, providers, audit explorer, devices, risk rules, anomalies, AI copilot and compliance — light/dark, tenant-aware, no JS framework required. Part of the
padosoft/laravel-rebel-*suite.
Table of contents
- What it is
- Screenshots
- Why this panel
- Rebel Admin Panel vs the alternatives
- Installation
- Configuration
- Sections
- Architecture
- Security notes
.env.example- Testing & License
What it is
The web UI of the Rebel control plane. It does not query your database directly — it
renders a skeleton and hydrates each widget over the Admin API (AbortController fetch,
explicit loading/empty/error states). It's deliberately dependency-light: Blade + a single
vanilla-JS file + CSS variables, no Alpine/Livewire/React/Vue required, Bootstrap-compatible.
Depends on padosoft/laravel-rebel-core
and padosoft/laravel-rebel-admin-api
(the data source).
v0.1.0 status: the full shell (10 sections, theming, tenant/period context, access gate) is in place; Security Overview and Audit Explorer hydrate from the live API, and the remaining sections render an "endpoint pending" state until their Admin API endpoints ship in upcoming releases.
Screenshots
Why this panel
| ★ | What | In short |
|---|---|---|
| ★★★ | API-driven, no direct DB queries | The UI only talks to the Admin API — safe, cacheable, and decoupled from your schema. |
| ★★★ | Dependency-light | Blade + one vanilla-JS file + CSS variables. No JS framework, no heavy build step. |
| ★★★ | Fail-closed access | Anonymous → login; authenticated without the rebel-admin ability → 403. |
| ★★ | Light/dark + tenant/period context | Theme toggle and global context that re-hydrates every widget. |
| ★★ | Explicit widget states | Every widget draws loading (skeleton), empty, and error (with retry). |
| ★★ | Accessible & responsive | Focus-visible, aria-live regions, collapsible sidebar. |
Rebel Admin Panel vs the alternatives
Building an auth-ops dashboard, compared:
| Capability | Rebel Admin Panel | Shopify | Generic admin (Nova/Filament) | Hand-rolled Blade dashboards |
|---|---|---|---|---|
| Purpose-built for the Rebel auth stack | ✅ | ❌ | ❌ | ➖ |
| API-driven (no direct DB coupling) | ✅ | ➖ | ❌ | ❌ |
| No JS framework / heavy build required | ✅ | ❌ | ❌ | ✅ |
| Self-hosted in your app (not hosted SaaS) | ✅ | ❌ | ✅ | ✅ |
| Themeable Blade over your own data | ✅ | ❌ | ➖ | ✅ |
| Hosted admin dashboard for staff | ✅ | ✅ | ✅ | ➖ |
| Built-in light/dark + tenant/period context | ✅ | ➖ | ➖ | ❌ |
| Explicit loading/empty/error per widget | ✅ | ➖ | ➖ | ❌ |
| Fail-closed access gate out of the box | ✅ | ➖ | ➖ | ❌ |
| Feature-flagged by installed Rebel packages | ✅ | ❌ | ❌ | ❌ |
| Ships with the security section designs | ✅ | ➖ | ❌ | ❌ |
Legend: ✅ built-in · ➖ partial / DIY / hosted-only / not exposed to you · ❌ not available.
Note: Shopify is a hosted, closed commerce platform — it ships its own admin dashboard but you can't self-host it, extend it, point it at your own data/tenants, or treat it as a library for your app.
Installation
Grant access by defining the rebel-admin Gate (fail-closed by default):
Visit /admin/rebel.
Configuration
File config/rebel-admin.php:
| Key | Default | What it does |
|---|---|---|
prefix |
admin/rebel |
Where the panel is mounted. |
middleware |
['web'] |
Base middleware (session); EnsurePanelAccess is appended. |
guard |
'' |
Auth guard to require ('' = default). |
ability |
rebel-admin |
Gate ability to require (fail-closed). |
api_base |
/rebel/admin/api/v1 |
The Admin API base the JS hydrates from. |
login_redirect |
/login |
Where anonymous visitors are sent. |
Sections
Overview · OTP & Step-up Funnels · Channel Performance · Provider Health · Audit Explorer ·
Device & Session Trust · Risk Rules · Anomaly Detection · AI Security Copilot · Compliance
Center. See docs/admin-panel-template-spec.md for the
full per-section component + endpoint specification.
Architecture
Each section is one Blade page that renders the skeleton and declares its widgets via
data-rebel-widget + data-endpoint; rebel-admin.js hydrates them and re-fetches on
tenant/period changes.
Security notes
- No direct DB access from the UI — only the Admin API, which is itself permission-gated and tenant-scoped.
- Fail-closed: the panel requires the
rebel-adminability by default. - No plaintext PII: the Admin API only exposes HMAC'd identifiers; the panel renders text
via
textContent(noinnerHTMLinterpolation of data). - Same-origin, CSRF-aware requests.
.env.example
🔋 Vibe coding with batteries included
This package ships AI batteries — so you (and your AI agent) can extend it correctly on the first try:
CLAUDE.md— a concise AI working guide (purpose, conventions, architecture, how to extend, Definition of Done). Plain Markdown, so Claude Code, Cursor, Copilot and Codex all read it.AGENTS.md— the agent/workflow contract (branch → PR → CI → tag/release, the gates)..claude/skills/— invocable skills (at leastrebel-package-dev) encoding the suite's TDD loop, the PHPStan-level-max recipes, the security/telemetry rules, and the release discipline.
Open the repo in your AI editor and just start — the rules, guardrails and extension recipes come
with it. PRs that follow the shipped CLAUDE.md pass CI (PHPStan max + Pest + Pint) and review the
first time around.
Testing & License
License: MIT — see padosoft/laravel-rebel suite.
All versions of laravel-rebel-admin with dependencies
illuminate/contracts Version ^12.0|^13.0
illuminate/support Version ^12.0|^13.0
spatie/laravel-package-tools Version ^1.92
padosoft/laravel-rebel-core Version ^0.1
padosoft/laravel-rebel-admin-api Version ^0.1