laravel-auth

Laravel Sanctum SPA cookie authentication requires proper CORS configuration and synchronized CSRF protection between the frontend and backend. This skill provides standardized workflows to correctly wire cookie sessions, configure CORS, and ensure tokens are securely issued for Inertia-based applications.

Multi-guard authentication and Policy-based access control in Laravel 12 standardize authorization workflows across different user types. This skill facilitates secure implementation of multi-guard configurations and Policy-based access control to prevent broken access control vulnerabilities.

Laravel authentication session fixation and CSRF misconfiguration vulnerabilities often stem from missing middleware or insecure session handling. This skill resolves these complex authentication challenges by providing automated audit checklists to detect missing middleware and insecure password handling.

Auditing Laravel applications for missing login throttling and brute-force vulnerabilities involves checking authentication middleware configurations. This skill provides automated security audit checklists and troubleshooting matrices to detect brute-force vulnerabilities and insecure session handling.

Laravel Fortify headless authentication works with API token management and multi-guard configurations to provide secure access control. This skill orchestrates these auth flows, ensuring compliance with security best practices for token issuance and multi-guard setups.

Sanctum cookie sessions for SPA authentication in Laravel can face limitations with CORS misconfiguration and unsynchronized CSRF protection. This skill provides troubleshooting matrices for common auth-related failures to address these limitations and ensure secure session handling.