saasify/saasify

A saas starter kit using Laravel.

0.1.0 2022-05-25 18:44 UTC

Requires

• php: ^8.0.2
• guzzlehttp/guzzle: ^7.2
• laravel/fortify: ^1.13
• laravel/framework: ^9.11
• laravel/octane: ^1.2
• laravel/passport: ^10.4
• laravel/tinker: ^2.7
• santigarcor/laratrust: ^7.1

Requires (Dev)

• barryvdh/laravel-ide-helper: ^2.12
• fakerphp/faker: ^1.9.1
• itsgoingd/clockwork: ^5.1
• knuckleswtf/scribe: ^3.28
• mockery/mockery: ^1.4.4
• nunomaduro/collision: ^6.1
• phpunit/phpunit: ^9.5.10
• spatie/laravel-ignition: ^1.0

MIT

• framework
• ecommerce
• api
• oauth2
• cms
• laravel
• saas

README

The best parts of the best packages.

The what?

Saasify is a starter kit for SaaS applications.

It is built using Laravel, Passport, Laratrust, Scribe and some helper packages.

Intended to be used for building SaaS applications similar to Shopify, Github and others.

The why?

The reason for starting this, was that the default Laravel project skeleton is geared toward building simple applications, with the optional usage of the API only by it's owners.

Why Sanctum? From the moment I started, this did not suffice. Simply because you cannot authorize a third party to manipulate the data in the right way. Sanctum works by generating personal tokens. Although it allows the setting of limited scopes, it still is not quite like complete OAUTH2 with JWT, which proves who generated the token (the user), who is granted access (the application), and many other things you'd embed in the JWT for the purpose of a SaaS application that would offer the same level of structure as Shopify and similar businesses (not only ecommerce platforms, but even like Github for example and their Marketplace).

Passport is easy to use, it is easy to understand, it not only works, but really, really works. It is exactly what you need to build the next Shopify. Therefore, why would you start with Sanctum and then, when going to production, cry that it's going to cost you a huge amount to move to Passport?

Building the next Shopify or Github involves making Auth good from start, or the complexity to fix it may cause the business to fail.