laravel-auth-hardening

What problem does it solve?

This Skill addresses common security vulnerabilities in Laravel authentication, such as enumeration, role-based privilege escalation, and token revocation issues.

Core Features & Use Cases

• Anti-Enumeration: Prevents revealing the existence of accounts through authentication endpoints.
• Role Allowlist Discipline: Ensures that roles are not mass-assigned and are securely managed.
• Sanctum Token Revocation: Tests and enforces the revocation of Sanctum tokens.
• Null-Safe Ownership Comparisons: Safely compares user identity with model relations.
• Vulnerability-Class Thinking: Applies security measures across all relevant endpoints.
• Use Case: When implementing or auditing Laravel authentication, use this Skill to harden your application against common security threats.

Quick Start

Run the 'laravel-auth-hardening' skill to review and harden your Laravel authentication system.