sparktech/laravel-auth

Professional authentication foundation package for Laravel applications.

v1.0.4 2026-08-12 11:27 UTC

Requires

• php: ^8.2
• illuminate/auth: ^12.0
• illuminate/config: ^12.0
• illuminate/console: ^12.0
• illuminate/contracts: ^12.0
• illuminate/database: ^12.0
• illuminate/hashing: ^12.0
• illuminate/http: ^12.0
• illuminate/mail: ^12.0
• illuminate/notifications: ^12.0
• illuminate/routing: ^12.0
• illuminate/support: ^12.0
• illuminate/validation: ^12.0
• laravel/sanctum: ^4.0
• laravel/socialite: ^5.23

Requires (Dev)

• laravel/pint: ^1.0
• orchestra/testbench: ^10.0
• pestphp/pest: ^3.8
• pestphp/pest-plugin-laravel: ^3.2
• phpstan/phpstan: ^2.0

proprietary

Published on Packagist.org on 2026-08-12 11:28 UTC

README

sparktech/laravel-auth is a private, reusable authentication foundation for Laravel applications.

Version

1.0.2 — Laravel 12 Authentication Foundation

Current milestone

This release establishes the package foundation:

• Composer package metadata
• PSR-4 autoloading
• Laravel package auto-discovery
• Service Provider
• Config file
• Publishable config
• Publishable migrations directory
• Package installation command
• Package route registration
• Health endpoint
• Initial test/tooling configuration

Core authentication is now included:

• Register
• Login
• Logout
• Current user (/me)
• Password hashing
• Validation
• Laravel Sanctum token authentication
• Token revocation
• Logout all devices
• Device token names
• OTP send/verify foundation
• OTP expiration and attempt limits
• Social provider contract foundation

Requirements

• PHP 8.2+
• Laravel 12.x

Local development

From a Laravel application, add the package as a Composer path repository:

{
    "repositories": [
        {
            "type": "path",
            "url": "../sparktech-laravel-auth"
        }
    ]
}

Then:

composer require sparktech/laravel-auth:@dev
php artisan sparktech-auth:install

The package health endpoint will be available at:

GET /api/auth/health

Expected response:

{
    "success": true,
    "package": "sparktech/laravel-auth",
    "version": "1.0.2",
    "status": "ready"
}

Package commands

php artisan sparktech-auth:install

Important integration note

The package uses the host application's configured user model (sparktech-auth.user_model) and expects the standard Laravel users table with name, email, and password fields.

Run migrations after installing:

php artisan migrate

Sanctum setup

Add the Sanctum trait to the host application's App\Models\User model:

use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens;
}

Then publish/run Sanctum migrations in the host application:

php artisan vendor:publish --provider="Laravel\Sanctum\SanctumServiceProvider"
php artisan migrate

The package uses auth:sanctum for protected routes.

Core authentication endpoints

POST /api/auth/register
POST /api/auth/login
POST /api/auth/email/verify-otp
POST /api/auth/email/resend-otp
POST /api/auth/logout
POST /api/auth/logout-all
GET  /api/auth/me
POST /api/auth/change-password
POST /api/auth/forgot-password
POST /api/auth/reset-password
POST /api/auth/deactivate

Registration email OTP flow

Registration now works as:

POST /api/auth/register
        ↓
Create user
        ↓
Generate 6-digit OTP
        ↓
Store hashed OTP + expiry
        ↓
Send OTP by email
        ↓
POST /api/auth/email/verify-otp
        ↓
Mark email_verified_at
        ↓
Issue Sanctum token

Resend:

POST /api/auth/email/resend-otp

Configure Laravel's normal MAIL_* environment variables in the host application's .env. The package uses Laravel's notification mail channel, so SMTP/Mailgun/SES/etc. can be configured by the host application.

Social login

GET /api/auth/social/google/redirect
GET /api/auth/social/google/callback

GET /api/auth/social/apple/redirect
GET /api/auth/social/apple/callback

The provider system is extensible for Facebook, GitHub, GitLab, LinkedIn and Bitbucket.

Important User model requirement

For account deactivation, add is_active to the users table. This package includes a migration for it.

For Sanctum:

use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens;
}

API endpoints

POST /api/auth/register
POST /api/auth/login
POST /api/auth/email/verify-otp
POST /api/auth/email/resend-otp
POST /api/auth/logout
POST /api/auth/logout-all
GET  /api/auth/me
POST /api/auth/otp/send
POST /api/auth/otp/verify
GET  /api/auth/health

For /logout and /me, send:

Authorization: Bearer YOUR_TOKEN

Package API route behavior

The package keeps authentication routes in its routes/api.php file. The route file intentionally does not add the api prefix. When php artisan sparktech-auth:install publishes these routes into the host application's routes/api.php, Laravel's API route configuration provides the /api prefix.

Therefore, the default endpoints are:

/api/auth/register
/api/auth/login
/api/auth/logout
/api/auth/me
/api/auth/health

The installer merges the package routes and required imports into an existing routes/api.php, or creates that file when the Laravel API stack is not yet enabled. Use --force only when you intentionally want to replace the existing API routes file.

Security

This is a proprietary/private package. Do not commit application credentials, OAuth secrets, API keys, or production .env files to this repository.