Flycro/laravel-nuxt-ui-inertia-template
Template
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(auth): harden authentication and add configurable two-factor support

Browse Source
This commit is contained in:
Flycro
2026-07-31 03:12:46 +02:00
parent 235d5f646c
commit e47243f7dc
51 changed files with 2904 additions and 1359 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
routes/auth.php
View File

@@ -9,34 +9,38 @@ use App\Http\Controllers\Auth\ResetPasswordController;
use App\Http\Controllers\Auth\SocialiteController;
use App\Http\Controllers\Auth\TwoFactorChallengeController;
use App\Http\Controllers\Auth\TwoFactorSettingsController;
use App\Http\Controllers\Auth\TwoFactorSetupController;
use App\Http\Controllers\ProfileController;
use Illuminate\Support\Facades\Route;
Route::middleware('guest')->group(function () {
Route::get('login', [LoginController::class, 'create'])->name('login');
Route::post('login', [LoginController::class, 'store'])->middleware('throttle:5,1');
Route::post('login', [LoginController::class, 'store'])->middleware('throttle:auth.login');
Route::get('register', [RegisterController::class, 'create'])->name('register');
Route::post('register', [RegisterController::class, 'store'])->middleware('throttle:3,60');
Route::post('register', [RegisterController::class, 'store'])->middleware('throttle:auth.register');
Route::get('forgot-password', [ForgotPasswordController::class, 'create'])->name('password.request');
Route::post('forgot-password', [ForgotPasswordController::class, 'store'])->name('password.email')->middleware('throttle:3,15');
Route::post('forgot-password', [ForgotPasswordController::class, 'store'])->name('password.email')->middleware('throttle:auth.password-email');
Route::get('reset-password/{token}', [ResetPasswordController::class, 'create'])->name('password.reset');
Route::post('reset-password', [ResetPasswordController::class, 'store'])->name('password.store')->middleware('throttle:5,15');
Route::post('reset-password', [ResetPasswordController::class, 'store'])->name('password.store')->middleware('throttle:auth.password-reset');
// Socialite routes
Route::get('auth/{provider}', [SocialiteController::class, 'redirect'])->name('socialite.redirect');
Route::get('auth/{provider}/callback', [SocialiteController::class, 'callback'])->name('socialite.callback')->middleware('throttle:10,1');
Route::get('auth/{provider}', [SocialiteController::class, 'redirect'])
->middleware('throttle:auth.social')
->name('socialite.redirect');
Route::get('auth/{provider}/callback', [SocialiteController::class, 'callback'])->name('socialite.callback')->middleware('throttle:auth.social');
// Complete profile after social login (when username is taken)
Route::get('complete-profile', [CompleteProfileController::class, 'create'])->name('auth.complete-profile');
Route::post('complete-profile', [CompleteProfileController::class, 'store']);
Route::post('complete-profile', [CompleteProfileController::class, 'store'])
->middleware('throttle:auth.social');
Route::get('two-factor-challenge', [TwoFactorChallengeController::class, 'create'])
->name('two-factor.login');
Route::post('two-factor-challenge', [TwoFactorChallengeController::class, 'store'])
->middleware('throttle:5,1')
->middleware('throttle:auth.two-factor')
->name('two-factor.login.store');
});
@@ -46,20 +50,32 @@ Route::middleware('auth')->group(function () {
// Email verification routes
Route::get('email/verify', [EmailVerificationController::class, 'notice'])->name('verification.notice');
Route::get('email/verify/{id}/{hash}', [EmailVerificationController::class, 'verify'])->middleware('signed')->name('verification.verify');
Route::post('email/verification-notification', [EmailVerificationController::class, 'resend'])->middleware('throttle:6,1')->name('verification.send');
Route::post('email/verification-notification', [EmailVerificationController::class, 'resend'])
->middleware('throttle:auth.account')
->name('verification.send');
Route::get('profile', ProfileController::class)->name('profile.show');
Route::redirect('security', '/profile')->name('profile.security-redirect');
Route::get('two-factor-setup', TwoFactorSetupController::class)
->name('two-factor.setup');
Route::get('two-factor-setup/complete', [TwoFactorSetupController::class, 'complete'])
->name('two-factor.setup.complete');
Route::post('two-factor-setup', [TwoFactorSettingsController::class, 'enable'])
->middleware('throttle:auth.two-factor')
->name('two-factor.setup.enable');
Route::post('two-factor-setup/confirm', [TwoFactorSettingsController::class, 'confirm'])
->middleware('throttle:auth.two-factor')
->name('two-factor.setup.confirm');
Route::post('profile/two-factor', [TwoFactorSettingsController::class, 'enable'])
->middleware('throttle:5,1')
->middleware('throttle:auth.two-factor')
->name('profile.two-factor.enable');
Route::post('profile/two-factor/confirm', [TwoFactorSettingsController::class, 'confirm'])
->middleware('throttle:5,1')
->middleware('throttle:auth.two-factor')
->name('profile.two-factor.confirm');
Route::delete('profile/two-factor', [TwoFactorSettingsController::class, 'disable'])
->middleware('throttle:5,1')
->middleware('throttle:auth.two-factor')
->name('profile.two-factor.disable');
Route::post('profile/two-factor/recovery-codes', [TwoFactorSettingsController::class, 'recoveryCodes'])
->middleware('throttle:5,1')
->middleware('throttle:auth.two-factor')
->name('profile.two-factor.recovery-codes');
});