developing-with-fortify

Headless authentication in Laravel is configured by enabling features in the config/fortify.php file and creating actionable user contracts in app/Actions/Fortify. This scaffolds login, registration, and 2FA flows for web and API routes without frontend views.

Laravel Fortify handles two-factor authentication by enabling Features::twoFactorAuthentication() in the config/fortify.php features array. This mechanism provides built-in TOTP support, generating QR codes and recovery codes for secure backend access.

Yes, Laravel Fortify supports API routes by aligning routes, controllers, and middleware for secure headless auth across web and API endpoints. It acts as a backend provider, allowing you to build your own frontend or API clients.

To implement email verification, enable Features::emailVerification() in the config/fortify.php features array. This requires your User model to implement the MustVerifyEmail contract to handle the verification logic.

The best way to scaffold password reset and profile management is activating Features::resetPasswords() and Features::updateProfileInformation() within Laravel Fortify. This automates the backend logic for password recovery and profile updates.

A Laravel Fortify registration flow might not work if Features::registration() is not properly enabled in the config/fortify.php features array, or if actionable user contracts in app/Actions/Fortify are misaligned with your secure auth routes.