Laravel Fortify – Backend authentication for Laravel

Projects Inventory

2 months ago

Laravel Fortify is a backend authentication package for Laravel applications, providing a set of features to handle user authentication, registration, password resets, and more. Fortify focuses solely on the backend aspects of authentication, allowing developers to build custom frontend interfaces as needed. It is designed to work seamlessly with Laravel’s built-in features and can be easily customized to fit your application’s requirements.

Key Features of Laravel Fortify:

User Registration: Provides a straightforward way to handle user registration with validation.

Login and Logout: Manages user login and logout processes, including session management.
Password Reset: Implements password reset functionality using email verification.
Email Verification: Supports email verification for new user registrations.
Two-Factor Authentication: Enables two-factor authentication for added security.
User Profile Updates: Allows users to update their profile information, such as password and email address.

Installation

To get started with Laravel Fortify, follow these steps:

Install Laravel Fortify: Use Composer to install the package:

composer require laravel/fortify

1

composer require laravel/fortify
Publish the Fortify Configuration: Publish the Fortify configuration file:

php artisan vendor:publish --provider="Laravel\Fortify\FortifyServiceProvider"

1

php artisan vendor:publish --provider="Laravel\Fortify\FortifyServiceProvider"
Run Migrations: Run the necessary migrations to create the required tables:

php artisan migrate

1

php artisan migrate
Configure Fortify: You can customize Fortify’s behavior by editing the config/fortify.php configuration file. This file allows you to enable or disable features such as registration, password resets, and two-factor authentication.

Setting Up Fortify Features

To enable the authentication features provided by Fortify, you need to register them in your application.

1. Registering Authentication Features:

In your FortifyServiceProvider, you can register various features:

namespace App\Providers;

use Laravel\Fortify\Fortify;
use Illuminate\Support\ServiceProvider;

class FortifyServiceProvider extends ServiceProvider
{
    public function boot()
    {
        Fortify::createUsersUsing(CreateNewUser::class);
        Fortify::authenticateUsing(function (Request $request) {
            // Custom authentication logic
        });

        Fortify::requestPasswordResetLinkUsing(SendPasswordResetLink::class);
        Fortify::resetUserPasswordsUsing(ResetUserPassword::class);
    }
}

namespace App\Providers;

use Laravel\Fortify\Fortify;

use Illuminate\Support\ServiceProvider;

class FortifyServiceProvider extends ServiceProvider

{

public function boot()

{

Fortify::createUsersUsing(CreateNewUser::class);

Fortify::authenticateUsing(function (Request $request) {

// Custom authentication logic

});

Fortify::requestPasswordResetLinkUsing(SendPasswordResetLink::class);

Fortify::resetUserPasswordsUsing(ResetUserPassword::class);

}

2. Customizing Registration:

You can create a custom user registration class to handle user creation and validation:

namespace App\Actions\Fortify;

use App\Models\User;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\ValidationException;

class CreateNewUser
{
    public function create(array $data)
    {
        return User::create([
            'name' => $data['name'],
            'email' => $data['email'],
            'password' => Hash::make($data['password']),
        ]);
    }
}

namespace App\Actions\Fortify;

use App\Models\User;

use Illuminate\Support\Facades\Hash;

use Illuminate\Validation\ValidationException;

class CreateNewUser

{

public function create(array $data)

{

return User::create([

'name' => $data['name'],

'email' => $data['email'],

'password' => Hash::make($data['password']),

]);

}

Customizing Authentication Logic

You can customize the authentication process by defining your logic in the authenticateUsing method:

Fortify::authenticateUsing(function (Request $request) {
    $user = User::where('email', $request->email)->first();

    if ($user && Hash::check($request->password, $user->password)) {
        return $user;
    }
});

Fortify::authenticateUsing(function (Request $request) {

$user = User::where('email', $request->email)->first();

if ($user && Hash::check($request->password, $user->password)) {

return $user;

}

});

Implementing Password Reset

Fortify provides built-in functionality for password resets. You can customize the behavior by creating your own actions:

namespace App\Actions\Fortify;

use Illuminate\Support\Facades\Password;

class SendPasswordResetLink
{
    public function send(array $data)
    {
        $response = Password::sendResetLink(
            ['email' => $data['email']]
        );

        return $response == Password::RESET_LINK_SENT;
    }
}

namespace App\Actions\Fortify;

use Illuminate\Support\Facades\Password;

class SendPasswordResetLink

{

public function send(array $data)

{

$response = Password::sendResetLink(

['email' => $data['email']]

);

return $response == Password::RESET_LINK_SENT;

}

Enabling Two-Factor Authentication

Fortify supports two-factor authentication (2FA) out of the box. To enable it, you can register the feature in the FortifyServiceProvider:

Fortify::twoFactorAuthenticationUsing(function ($user) {
    // Logic for enabling 2FA
});

Fortify::twoFactorAuthenticationUsing(function ($user) {

// Logic for enabling 2FA

});

1. Generating Backup Codes:

You can create backup codes for users to use if they lose access to their 2FA method:

use Illuminate\Support\Str;

class GenerateTwoFactorBackupCodes
{
    public function generate()
    {
        return [
            Str::random(10),
            Str::random(10),
            Str::random(10),
            Str::random(10),
            Str::random(10),
        ];
    }
}

use Illuminate\Support\Str;

class GenerateTwoFactorBackupCodes

{

public function generate()

{

return [

Str::random(10),

];

}

Profile Management

You can allow users to update their profile information, including email and password, by implementing the necessary routes and views.

1. Profile Update Action:

You can create a custom action to handle profile updates:

namespace App\Actions\Fortify;

use Illuminate\Support\Facades\Hash;

class UpdateUserProfile
{
    public function update(array $data, User $user)
    {
        $user->update([
            'name' => $data['name'],
            'email' => $data['email'],
        ]);

        if (!empty($data['password'])) {
            $user->password = Hash::make($data['password']);
            $user->save();
        }
    }
}

namespace App\Actions\Fortify;

use Illuminate\Support\Facades\Hash;

class UpdateUserProfile

{

public function update(array $data, User $user)

{

$user->update([

'name' => $data['name'],

'email' => $data['email'],

]);

if (!empty($data['password'])) {

$user->password = Hash::make($data['password']);

$user->save();

}

Conclusion

Laravel Fortify is a powerful authentication package that provides a comprehensive backend solution for managing user authentication in your Laravel applications. It allows for easy customization and integration with existing features, enabling developers to create secure and robust authentication systems.

Additional Considerations

Custom Frontend: Since Fortify is focused on the backend, you’ll need to implement your own frontend forms for login, registration, and password resets.
Middleware: Use middleware to protect routes that require authentication.
Testing: Ensure to write tests for your authentication logic to validate that all features work as expected.

Key Features of Laravel Fortify:

Installation

Setting Up Fortify Features

1. Registering Authentication Features:

2. Customizing Registration:

Customizing Authentication Logic

Implementing Password Reset

Enabling Two-Factor Authentication

1. Generating Backup Codes:

Profile Management

1. Profile Update Action:

Conclusion

Additional Considerations

Related Posts: