mostbyte / auth

4.3.1 2026-01-27 10:16 UTC

Requires

• php: ^8.4
• guzzlehttp/guzzle: ^7.8
• illuminate/contracts: ^11.0|^12.0
• illuminate/database: ^11.0|^12.0
• illuminate/support: ^11.0|^12.0

Requires (Dev)

• orchestra/testbench: ^9.0
• phpunit/phpunit: ^11.0

MIT

• Firdavs Ibodullaev

Published on Packagist.org on 2026-01-27 10:16 UTC

README

Authorization package for Laravel applications using Mostbyte Identity Service.

Requirements

Dependency	Version
PHP	>= 8.4
Laravel	11.x, 12.x

Version Compatibility

Laravel Version	Package Version
< 10.x	2.x
11.x, 12.x	3.x

Installation

Install via Composer:

composer require mostbyte/auth

Or add manually to composer.json:

{
  "require": {
    "mostbyte/auth": "^3.0"
  }
}

Then run:

composer update

Configuration

Publish the configuration file:

php artisan vendor:publish --provider="Mostbyte\Auth\AuthServiceProvider"

Environment Variables

Variable	Description	Default
IDENTITY_BASE_URL	Identity service URL	https://auth.mostbyte.uz
LOCAL_DEVELOPMENT	Enable mock responses	false

Warning LOCAL_DEVELOPMENT=true makes every request to the identity service return a fake success response, so any token is accepted as a valid superUser. It is an authorization bypass, not a convenience flag. The default is false so that a service which never sets the variable is secure; opt in explicitly in your local .env only.

Changed in 5.0.0 — previously the default was true, which meant a deploy that forgot to set LOCAL_DEVELOPMENT=false ran with authorization disabled. If you are upgrading and relied on the old default for local work, add LOCAL_DEVELOPMENT=true to your local .env.

Usage

Basic Middleware Usage

use Mostbyte\Auth\Middleware\IdentityAuth;

Route::middleware(IdentityAuth::class)->get('/foo', function () {
    return 'bar';
});

With No-Domain Parameter

use Mostbyte\Auth\Middleware\IdentityAuth;

Route::middleware(IdentityAuth::using('no-domain'))->get('/foo', function () {
    return 'bar';
});

Register as Alias

In bootstrap/app.php (Laravel 11+):

->withMiddleware(function (Middleware $middleware) {
    $middleware->alias([
        'identity' => \Mostbyte\Auth\Middleware\IdentityAuth::class,
    ]);
})

Then use in routes:

Route::middleware('identity')->get('/foo', function () {
    return 'bar';
});

Accessing Authenticated User

// Get authenticated user
$user = auth()->user();

// Access relationships
$company = auth()->user()->company;
$role = auth()->user()->role;

// Get token
$token = auth()->user()->getToken();

License

MIT