PHPackages                             laravelui5/auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. laravelui5/auth

ActiveLibrary[Authentication & Authorization](/categories/authentication)

laravelui5/auth
===============

Password + session authentication for LaravelUi5 apps, with a UI5 frontend.

v0.1.8(1w ago)09MITPHPPHP >=8.2

Since Apr 28Pushed 6d agoCompare

[ Source](https://github.com/pragmatiqu/laravelui5-auth)[ Packagist](https://packagist.org/packages/laravelui5/auth)[ Docs](https://github.com/pragmatiqu/laravelui5-auth)[ RSS](/packages/laravelui5-auth/feed)WikiDiscussions master Synced 1w ago

READMEChangelog (1)Dependencies (1)Versions (10)Used By (0)

laravelui5/auth
===============

[](#laravelui5auth)

Password + session authentication for [LaravelUi5](https://laravelui5.com) apps, with a UI5 frontend.

It ships a self-contained UI5 login mini-app (login, logout, forgot/reset password) driven through LaravelUi5 Core, on top of Laravel's standard `Auth` and `Password` brokers — plus an **intent system** for sequencing post-login steps (e.g. org onboarding) before the user reaches their destination.

Requirements
------------

[](#requirements)

- PHP `>= 8.2`
- `laravelui5/core: ^0.9` (which determines the supported Laravel version)
- A consuming app with Laravel's stock auth tables (`users`, `password_reset_tokens`) and a named `dashboard` route (the default post-login redirect target — see [Post-login redirects](#post-login-redirects)).

Installation
------------

[](#installation)

```
composer require laravelui5/auth
```

The service provider (`LaravelUi5\Auth\AuthServiceProvider`) is auto-discovered via `extra.laravel.providers` — no manual registration. On boot it loads the package routes, registers the UI5 `AuthModule` with Core's infrastructure collector, and points Laravel's password-reset notification at the package's `password.reset` route.

What it provides
----------------

[](#what-it-provides)

Routes (all under the `web` middleware group):

MethodURINameNotesGET`/login``login`Redirects to the UI5 auth app (guest only)POST`/auth/login``login.submit`Email + password sign-in, rate-limitedPOST`/auth/forgot-password``password.email`Enumeration-safe reset requestGET`/password/reset/{token}``password.reset`Pre-validates the token, then redirects to the UI5 set-password viewPOST`/auth/reset-password``password.update`Sets the new passwordPOST`/logout``logout`Drops the session (auth only)POST`/auth/intents/org-setup``auth.intents.org_setup`Satisfies the OrgSetup intent (auth only)Login is throttled (5 attempts → `Lockout`), the session is regenerated on success, and forgot-password responses are identical whether or not the email exists.

Post-login redirects
--------------------

[](#post-login-redirects)

After credentials are validated, the package asks an **`IntentDispenserInterface`** what to do next. It is called once after login and again after each intent is satisfied, until it returns a terminal `RedirectIntent`.

The default, `DefaultIntentDispenser`, returns:

```
new RedirectIntent(session()->pull('url.intended', route('dashboard')));
```

So out of the box, a user is sent to their intended URL or to `route('dashboard')`. Override by binding your own dispenser:

```
// In a service provider
$this->app->singleton(
    \LaravelUi5\Auth\Contracts\IntentDispenserInterface::class,
    \App\Auth\MyIntentDispenser::class,
);
```

Intents (multi-step onboarding)
-------------------------------

[](#intents-multi-step-onboarding)

A dispenser can return non-terminal intents to interrupt login with extra steps. The intent catalog is **closed** — kinds are added to the package deliberately. Two kinds ship today:

- `RedirectIntent { target }` — terminal; sends the user to a URL.
- `OrgSetupIntent { personName }` — prompts the user to complete organisation setup.

`OrgSetupIntent` requires the host to bind an **`OrgSetupHandlerInterface`**; the package ships no default, so dispensing it without a handler fails loud at request time (by design — the step needs host-side state coordination). A handler returns an `IntentResult`: `satisfied()`, `needsMoreInput($payload)`, or `error($errors)`.

License
-------

[](#license)

MIT — see [LICENSE](LICENSE).

Changelog
---------

[](#changelog)

See [CHANGELOG.md](CHANGELOG.md).

---

About this repository
---------------------

[](#about-this-repository)

This repo is the canonical **published distribution** of `laravelui5/auth` — the PHP source here is a faithful, content-identical copy of upstream, so it's the right place to read the code, consume the package, and [file issues](https://github.com/pragmatiqu/laravelui5-auth/issues).

It is **not** where development happens. It's generated by an automated [splitsh-lite](https://github.com/splitsh/lite) sub-split from the LaravelUi5 workspace, and its branch history is **force-replaced on every release** — pull requests opened here won't survive. Two further caveats for would-be contributors:

- The UI5 frontend under `resources/ui5/` is **compiled output**; its editable source lives in a separate project.
- Building from a clean clone requires `laravelui5/core`, which is distributed via a private package registry.

Code changes are integrated upstream, not merged here.

###  Health Score

40

—

FairBetter than 86% of packages

Maintenance98

Actively maintained with recent releases

Popularity7

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity42

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 90.9% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~3 days

Total

9

Last Release

13d ago

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/1590082?v=4)[Michael Gerzabek](/maintainers/mgerzabek)[@mgerzabek](https://github.com/mgerzabek)

---

Top Contributors

[![mgerzabek](https://avatars.githubusercontent.com/u/1590082?v=4)](https://github.com/mgerzabek "mgerzabek (30 commits)")[![ITGolfer](https://avatars.githubusercontent.com/u/134265316?v=4)](https://github.com/ITGolfer "ITGolfer (3 commits)")

---

Tags

authlaravellaravelui5ui5laravelauthAuthenticationui5laravelui5

### Embed Badge

![Health badge](/badges/laravelui5-auth/health.svg)

```
[![Health](https://phpackages.com/badges/laravelui5-auth/health.svg)](https://phpackages.com/packages/laravelui5-auth)
```

###  Alternatives

[auth0/login

Auth0 Laravel SDK. Straight-forward and tested methods for implementing authentication, and accessing Auth0's Management API endpoints.

2795.2M3](/packages/auth0-login)[vinkas/firebase-auth-laravel

Firebase Authentication package for Laravel PHP Framework

392.1k](/packages/vinkas-firebase-auth-laravel)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)