PHPackages                             patrikjak/auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. patrikjak/auth

ActiveLibrary[Authentication & Authorization](/categories/authentication)

patrikjak/auth
==============

Simple auth package for laravel apps

v1.4.1(2mo ago)05641MITPHPPHP ^8.4CI passing

Since Dec 26Pushed 2mo ago1 watchersCompare

[ Source](https://github.com/patrikjak/auth)[ Packagist](https://packagist.org/packages/patrikjak/auth)[ RSS](/packages/patrikjak-auth/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (7)Dependencies (18)Versions (10)Used By (1)

Auth
====

[](#auth)

[![codecov](https://camo.githubusercontent.com/48ff2d9f904014bdea8eee3c924327630b7e7aeb23ef6163a2bce033650d65ab/68747470733a2f2f636f6465636f762e696f2f67682f70617472696b6a616b2f617574682f67726170682f62616467652e7376673f746f6b656e3d41313342354639464d5a)](https://codecov.io/gh/patrikjak/auth)

Simple auth package for Laravel apps. Requires `patrikjak/utils`.

Installation
------------

[](#installation)

```
composer require patrikjak/auth
```

Setup
-----

[](#setup)

Register both service providers in `bootstrap/providers.php`:

```
use Patrikjak\Auth\AuthServiceProvider;
use Patrikjak\Utils\UtilsServiceProvider;

return [
    // ...
    UtilsServiceProvider::class,
    AuthServiceProvider::class,
];
```

Run the install command to publish all assets, config, migrations, and translations, remove default Laravel auth migrations, run fresh migrations, and seed default roles:

```
php artisan install:pjauth
```

Or publish individually:

```
php artisan vendor:publish --tag="pjauth-assets" --force
php artisan vendor:publish --tag="pjauth-config"
php artisan vendor:publish --tag="pjauth-migrations" --force
php artisan vendor:publish --tag="pjauth-translations" --force
php artisan vendor:publish --tag="pjauth-views" --force   # optional
```

To keep config up to date on every `composer update`, add to your `composer.json`:

```
"scripts": {
    "post-update-cmd": [
        "@php artisan vendor:publish --tag=pjauth-config --force"
    ]
}
```

> Laravel cannot merge multidimensional arrays in config files, so the config must be re-published after updates.

Configuration
-------------

[](#configuration)

All options live in `config/pjauth.php`.

### Custom User model

[](#custom-user-model)

```
AUTH_MODEL=App\Models\User
```

Default is `Patrikjak\Auth\Models\User`.

### Custom repository

[](#custom-repository)

```
// config/pjauth.php
'repositories' => [
    'user' => \App\Repositories\UserRepository::class,
],
```

The custom implementation must implement `Patrikjak\Auth\Repositories\Interfaces\UserRepository`.

### Redirects

[](#redirects)

```
'redirect_after_login'  => env('REDIRECT_AFTER_LOGIN', '/dashboard'),
'redirect_after_logout' => env('REDIRECT_AFTER_LOGOUT', '/'),
```

### Feature flags

[](#feature-flags)

All features are enabled by default except `register_via_invitation`:

```
'features' => [
    'register'                => true,
    'login'                   => true,
    'password_reset'          => true,
    'change_password'         => true,
    'register_via_invitation' => false,
],
```

Routes are only registered when their respective feature is enabled.

Routes
------

[](#routes)

Web routes use `['web', 'guest']` middleware. API routes use `['web', 'guest']` for unauthenticated endpoints and `['web', 'auth']` for authenticated ones.

### Middleware

[](#middleware)

Use `VerifyRole` to protect routes by role:

```
use Patrikjak\Auth\Http\Middlewares\VerifyRole;
use Patrikjak\Auth\Models\RoleType;

Route::middleware(['web', 'auth', VerifyRole::withRole(RoleType::ADMIN)]);
```

Super admins pass all role checks.

Roles
-----

[](#roles)

Default roles: `SUPERADMIN = 1`, `ADMIN = 2`, `USER = 3` (defined in `RoleType` enum).

Seed default roles:

```
php artisan seed:user-roles
# or with a custom enum:
php artisan seed:user-roles --enum=App\\Enums\\MyRoleType
```

The custom enum must use the `Patrikjak\Utils\Common\Traits\EnumValues` trait.

Artisan Commands
----------------

[](#artisan-commands)

### Create users interactively

[](#create-users-interactively)

```
php artisan create:users
```

Prompts for name, email, password, and role. Loops until you decline to add another user.

Socialite (Google)
------------------

[](#socialite-google)

Enable in config (enabled by default) and add credentials:

```
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
```

Add to `config/services.php`:

```
'google' => [
    'client_id'     => env('GOOGLE_CLIENT_ID'),
    'client_secret' => env('GOOGLE_CLIENT_SECRET'),
    'redirect'      => sprintf('%s/auth/google/callback', env('APP_URL')),
],
```

Register via Invitation
-----------------------

[](#register-via-invitation)

Enable the feature flag:

```
'features' => [
    'register_via_invitation' => true,
],
```

Send an invite from the command line:

```
php artisan send:register-invite user@example.com
```

The invite email contains a tokenised link to `GET /register/{token}?email=...`. On submission it calls `POST /api/invite/register`.

Change Password
---------------

[](#change-password)

Enable the feature flag (enabled by default):

```
'features' => [
    'change_password' => true,
],
```

Call the authenticated endpoint:

```
PATCH api/change-password

```

Request body:

```
{
    "old_password": "current_password",
    "password": "new_password",
    "password_confirmation": "new_password"
}
```

Old password validation is on by default. To skip it (e.g. admin resetting another user's password):

```
{
    "password": "new_password",
    "password_confirmation": "new_password",
    "validate_old_password": false
}
```

reCAPTCHA
---------

[](#recaptcha)

Enabled by default on register, login, and password reset API endpoints. Disable globally:

```
'recaptcha' => [
    'enabled' => false,
],
```

Or provide the keys:

```
RECAPTCHA_SITE_KEY=
RECAPTCHA_SECRET_KEY=
```

###  Health Score

46

—

FairBetter than 93% of packages

Maintenance85

Actively maintained with recent releases

Popularity18

Limited adoption so far

Community9

Small or concentrated contributor base

Maturity61

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~61 days

Recently: every ~91 days

Total

8

Last Release

76d ago

PHP version history (2 changes)1.0.0PHP ^8.3

1.1.0PHP ^8.4

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/49360467?v=4)[Patrik Jakab](/maintainers/patrikjak)[@patrikjak](https://github.com/patrikjak)

---

Top Contributors

[![patrikjak](https://avatars.githubusercontent.com/u/49360467?v=4)](https://github.com/patrikjak "patrikjak (20 commits)")

---

Tags

packagelaravelauth

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Type Coverage Yes

### Embed Badge

![Health badge](/badges/patrikjak-auth/health.svg)

```
[![Health](https://phpackages.com/badges/patrikjak-auth/health.svg)](https://phpackages.com/packages/patrikjak-auth)
```

###  Alternatives

[lab404/laravel-impersonate

Laravel Impersonate is a plugin that allows to you to authenticate as your users.

2.3k16.4M48](/packages/lab404-laravel-impersonate)[codegreencreative/laravel-samlidp

Make your PHP Laravel application an Identification Provider using SAML 2.0. This package allows you to implement your own Identification Provider (idP) using the SAML 2.0 standard to be used with supporting SAML 2.0 Service Providers (SP).

263763.5k1](/packages/codegreencreative-laravel-samlidp)[pallant/laravel-aws-cognito-auth

An authentication driver for Laravel for authenticating users in AWS Cognito User Pools

777.7k](/packages/pallant-laravel-aws-cognito-auth)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)