Pages · Laravilt
Auth Introduction
Complete authentication system for Laravilt panels
The Auth package provides a complete, modular authentication system for Laravilt panels.
Overview
Laravilt Auth supports 8 authentication methods:
- Email/Password - Traditional login with email and password
- Phone OTP - One-time password via SMS
- Social Authentication - OAuth with Google, GitHub, Facebook, etc.
- Passwordless - Magic links via email
- Passkeys (WebAuthn) - Biometric authentication
- Two-Factor Authentication - TOTP, Email OTP, SMS OTP
- Recovery Codes - Backup codes for 2FA
- API Tokens - Personal access tokens via Sanctum
Features
Security Features
- Password Encryption - Bcrypt hashing
- Encrypted Secrets - 2FA secrets encrypted at rest
- Hashed Recovery Codes - Individual bcrypt hashing
- Session Management - View and revoke active sessions
- Device Tracking - IP address and user agent logging
- Rate Limiting - Configurable attempt limits
Profile Management
- Update profile information
- Change password
- Manage two-factor authentication
- View/revoke active sessions
- Manage API tokens
- Register/delete passkeys
- Connect/disconnect social accounts
- Delete account
Dependencies
| Package | Purpose |
|---|---|
| Laravel Fortify | Authentication scaffolding |
| Laravel Socialite | OAuth authentication |
| Laravel Sanctum | API tokens |
| Laragear WebAuthn | Passkeys/WebAuthn |
| pragmarx/google2fa | TOTP implementation |
| bacon/bacon-qr-code | QR code generation |
Related
- Configuration - Configure auth settings
- User Model - Setup user model
- Migrations - Database migrations
- Routes - Generated routes
- Events - Auth events
- Profile Management - User profile features
Authentication Methods
- Email & Password - Traditional login
- Social Authentication - OAuth providers
- Two-Factor Authentication - TOTP, SMS, Email OTP
- Passkeys - WebAuthn biometric authentication