fadhil_riyanto/noauth-laravel

static auth set without DB

dev-master 2025-02-21 06:42 UTC

GPL-2.0

• fadhil riyanto

README

is a non-database authentication that keeps authentication as small as possible. good for single-user APP

Setup

create your password list inside .env with comma-separated string

NOAUTH_PASSWORD="abc123,foobar123,otherxyz"

first, use the namespace

use FadhilRiyanto\NoAuthLaravel\NoAuth;

defining routes for guest which try access route with NoAuthMiddleware class, the route must be named as 'noauth-guest', example

// guest will redireced here
Route::get('login', function() {
        return view('admin/login');
})->name("noauth-guest");

define admin route with middleware, example

// protect admin page using middleware NoAuthMiddleware
Route::get('home', [Controllers\AdminController::class, 'handle_admin_homepage'])
                ->middleware(NoAuthMiddleware::class);

authentication example, NoAuth::attemp is automatically create a session if successful and return false otherwise

class AdminController extends Controller
{
        public function handle_admin_login_ajax(Request $request)
        {
                $validator = Validator::make($request->all(), [
                        'password' => 'required',
                ]);

                $validated = $validator->validated();

                if (NoAuth::attemp($request)) {
                        return response()->json(["message" => "Welcome"], 200);
                } else {
                        return response()->json(["message" => "The provided credentials do not match our records"], 400);
                }
        }
}

Maintainer:

Fadhil-Riyanto

License

GPL-2.0