arindammakar / laravel-auth-installer

v1.0.6 2026-09-11 20:03 UTC

Requires

• php: ^8.2
• illuminate/console: ^11.0|^12.0|^13.0
• illuminate/filesystem: ^11.0|^12.0|^13.0
• illuminate/http: ^11.0|^12.0|^13.0
• illuminate/support: ^11.0|^12.0|^13.0

MIT

• Arindam Makar

• security
• Authentication
• auth
• laravel
• totp
• profile
• dashboard
• blade
• 2fa
• owasp
• starter-kit
• two-factor-authentication
• tailwind
• arindam-makar
• breeze-alternative

Published on Packagist.org on 2026-09-11 21:44 UTC

README

Production-Ready, OWASP-Hardened Laravel Authentication Scaffolding with 2FA (TOTP), Metrics Dashboard, User Profile, and 5 Distinct Tailwind CSS Themes. Created by Arindam Makar • Powered by Laravel Auth Builder.

A modern, zero-dependency alternative to Laravel Breeze that imports secure, production-ready authentication scaffolding directly into any Laravel application with zero Node.js build steps required.

Key Features & Capabilities

• 🚀 Zero-Build Instant Setup: Works out of the box with embedded Tailwind CDN fallback — no npm run build or Node.js required.
• 🎨 5 Distinct Design Themes:
  • Modern Indigo Glass: Deep space dark glassmorphism with glowing purple/indigo accents.
  • Classic Corporate SaaS: Pure light mode enterprise aesthetic with crisp white cards and royal blue buttons.
  • Minimal Brutalist Monochrome: High-contrast black & white Swiss architecture with 2px borders and hard shadows.
  • DevOps Cyber Charcoal Slate: Gunmetal dark mode with phosphor emerald green monospace typography.
  • Simple Clean Airy: Warm light mode with pill-rounded inputs and sky-blue accents.
• 🔐 Two-Factor Authentication (2FA): Zero-dependency pure PHP RFC 6238 TOTP engine (Google Authenticator, Authy, 1Password) with QR code setup, 6-digit confirmation, and 8 emergency recovery codes.
• 📊 Complete Metrics Dashboard: Built-in responsive dashboard layout with security metrics, recent activity, and navigation.
• 👤 Full User Profile: Credential management, secure password updates (with current password verification), 2FA controls, and password-confirmed account deletion.
• ✉️ Email Verification & Password Confirmation: Throttled verification notifications and sensitive area password confirmation.
• 🛡️ OWASP Hardened:
  • Open redirect defense on login via path sanitization.
  • Brute-force rate limiting with exponential delays.
  • Constant-time verification on security challenges.
  • Session fixation and CSRF protection.
  • Anti-enumeration email responses on password resets.
• 🧩 Universal Blade Layouts: Automatic aliasing for <x-auth-layout>, <x-layouts.auth>, <x-auth.auth-layout>, <x-guest-layout>, <x-layouts.guest>.

Requirements

• PHP: ^8.2 or ^8.3 or ^8.4 or ^8.5
• Laravel: ^11.0, ^12.0, or ^13.0

Installation

Install the package into your Laravel application via Composer:

composer require arindammakar/laravel-auth-installer --dev

Usage

Generate and copy your preferred design link from laravelbuild.laureon.in, then run:

php artisan auth:import http://laravelbuild.laureon.in/install/default

Or choose a specific design preset:

# Modern Indigo
php artisan auth:import http://laravelbuild.laureon.in/install/modern

# Classic Corporate Blue
php artisan auth:import http://laravelbuild.laureon.in/install/classic

# Minimal Monochrome
php artisan auth:import http://laravelbuild.laureon.in/install/minimal

# Slate Zinc
php artisan auth:import http://laravelbuild.laureon.in/install/slate

# Simple Clean
php artisan auth:import http://laravelbuild.laureon.in/install/simple

Next Steps after Import:

# Run migrations to create 2FA columns on users table
php artisan migrate

Options

# Overwrite existing conflicting files to switch theme or update scaffolding:
php artisan auth:import http://laravelbuild.laureon.in/install/default --force

# Preview what files will be created without modifying the project:
php artisan auth:import http://laravelbuild.laureon.in/install/default --dry-run

What Gets Installed

1. Controllers: Authentication controllers (LoginController.php, RegisterController.php, etc.), TwoFactorAuthenticationController.php, TwoFactorAuthenticatedSessionController.php, DashboardController.php, ProfileController.php.
2. Services: Pure RFC 6238 TOTP Engine (app/Services/Auth/TotpService.php) — zero external dependencies required.
3. Form Requests: Validated and throttled inputs (LoginRequest.php, RegisterRequest.php, ProfileUpdateRequest.php).
4. Views: 5 distinct design themes across Blade templates (resources/views/auth/*, resources/views/components/auth/*, resources/views/dashboard.blade.php, resources/views/profile/edit.blade.php).
5. Routes: Clean, isolated auth routes (routes/auth.php loaded automatically into routes/web.php).
6. Migrations: Non-destructive 2FA columns migration (database/migrations/xxxx_xx_xx_xxxxxx_add_two_factor_columns_to_users_table.php).

Credits & Author

• Author & Provider: Arindam Makar
• Platform: Laravel Auth Builder

License

This package is open-sourced software licensed under the MIT license.