laravel-auth-hardening

Prevent user enumeration in Laravel authentication by implementing anti-enumeration patterns that stop endpoints from revealing whether an account exists. This Skill applies vulnerability-class thinking to ensure login and registration responses do not leak valid identifiers.

Enforce role allowlist discipline in Laravel by securely managing roles to prevent mass assignment vulnerabilities. This Skill ensures roles are explicitly defined and protected, mitigating the risk of role-based privilege escalation during authentication.

Test Sanctum token revocation in Laravel by implementing tests that explicitly verify revoked tokens are immediately invalidated. This Skill hardens authentication by enforcing token revocation rules across all relevant API endpoints.

Null-safe ownership comparisons in Laravel are needed to safely compare user identity with model relations without throwing errors. This Skill implements secure comparisons to prevent authentication bypasses when relation data is unexpectedly null.

Yes, you can use this Laravel authentication hardening approach for auditing existing applications. The Skill applies vulnerability-class thinking to review and strengthen current authentication systems against enumeration, token revocation, and privilege escalation issues.

Laravel authentication hardening addresses security vulnerabilities including account enumeration, role-based privilege escalation, and Sanctum token revocation issues. This Skill systematically applies security measures across endpoints to resolve these common threats.