andriesreitsma/laravel-visa

My Laravel Passport add-on package

v0.0.1 2022-05-02 07:26 UTC

Requires

• php: ^7.3|^8.0
• ext-json: *
• illuminate/support: ^6|^7|^8|^9
• laravel/passport: ^10.3.3

Requires (Dev)

• phpunit/phpunit: ^9.0

MIT

• Andries Reitsma B.V.

• auth
• laravel

README

Add a VISA to your Laravel Passport, to give SPA's sign-in abilities using Passport ... work in progress

Add CreateFreshApiToken Middleware from laravel\passport add the end of all the web middleware, this way a cookie will be added to the responses coming from the back-end.

    /**
     * The application's route middleware groups.
     *
     * @var array
     */
    protected $middlewareGroups = [
        'web' => [
            ...
            \Laravel\Passport\Http\Middleware\CreateFreshApiToken::class,
        ],

Get CSRF Cookie before signing in with regular props

    const csrf = () => axios.get('/cookie')

Get your csrf cookie before posting to login to acquire a logged-in state

    await csrf()
    await axios.post('/login', [email,password]);

Logout is as simple as loggin in:

    await axios.post('/logout');

Since CSRF vurnability there's a workaround for posting with axios:

import Axios from 'axios'

const axios = Axios.create({
    baseURL: process.env.NEXT_PUBLIC_BACKEND_URL,
    headers: {
        'X-Requested-With': 'XMLHttpRequest',
        'Accept': 'application/json'
    },
    withCredentials: true,
    withXSRFToken: true  //Workaround
})

export default axios