Auth Config #

Auth Config was added to give you more control over how leaf handles authentication in your apps. Auth has been configured perfectly for most apps, but not all use cases are the same, hence, this brilliant addition.

This also includes various configurations for doing things like:

• Setting custom token lifetime
• Hiding/Showing user fields
• Adding/removing default timestamps
• Changing the default password key
• Setting custom password encode methods
• Turning off password encoding totally
• Setting custom password verify methods
• Hiding/Showing password field
• Adding custom validation messages
• Configuring tokens

config #

To set a config variable, you can simply call the config method.

auth()->config("item", "value");

You can also pass in an array to set multiple configs at once:

auth()->config([
  "item" => "value",
  "item2" => "value"
]);

Settings #

Below is a list of all available settings.

USE_TIMESTAMPS #

This determines whether Leaf should add the default created_at and updated_at timestamps on register and update. Default is true.

PASSWORD_ENCODE #

This setting has gone through a lot of changes since v2.4 beta, and may not work exactly the same way. This setting is run when leaf wants to encode a password. It now uses PASSWORD_DEFAULT by defaullt for encryption.

// This turns off password encoding
auth()->config("PASSWORD_ENCODE", false);

// defult encoding (Leaf\Helpers\Password::hash)
auth()->config("PASSWORD_ENCODE", null);

// use md5. We're still keeping support for md5 :-)
auth()->config("PASSWORD_ENCODE", Password::MD5);

// use custom method
auth()->config("PASSWORD_ENCODE", function ($password) {
  return Password::hash($password);
});

PASSWORD_VERIFY #

This setting is called when Leaf tries to verify a password. It works just like PASSWORD_ENCODE above.

// This turns off password encoding
auth()->config("PASSWORD_VERIFY", false);

// defult encoding (Leaf\Helpers\Password::hash)
auth()->config("PASSWORD_VERIFY", null);

// use md5. We're still keeping support for md5 :-)
auth()->config("PASSWORD_VERIFY", Password::MD5);

// use custom method
auth()->config("PASSWORD_VERIFY", function ($password) {
  return Password::verify($password);
});

PASSWORD_KEY #

This allows you to change the password field name, maybe yours is passcode? This tells leaf to look for a user's password in that field. The example below tells leaf to search for passwords in the passcode column. (the default field is password)

auth()->config("PASSWORD_KEY", "passcode");

ID_KEY #

ID_KEY allows you to set your primary key name. For instance, you might have used _id instead of id. This setting allows you to quickly and effectively switch your key name.

auth()->config("ID_KEY", "_id");

USE_UUID #

This simply allows you to set the value for user ids on your own. This is done in order to add support for UUIDs in your registrations and not go with the default SQL increments.

auth()->config("USE_UUID", UUID::v4());

HIDE_ID #

This is a boolean which determines whether to hide the id in the user object returned on login/register. Default is true.

AUTH_NO_PASS #

This allows you to manually tell leaf auth that no password is required for authentication. When this is set to true, leaf auth will assume there is no password and act accordingly. If there is no password field set in the credentials passed into the login or register methods, leaf auth will automatically set this to true.

HIDE_PASSWORD #

Just as the name implies, allows you to hide or show the password in the final results returned from auth. Default is true.

LOGIN_PARAMS_ERROR #

This is the error to show if there's an error with any parameter which isn't the password eg: username:

auth()->config("LOGIN_PARAMS_ERROR", "Username is incorrect!");

Default is Incorrect credentials!.

LOGIN_PASSWORD_ERROR #

This is the error to show if there's an error with the password.

Default is Password is incorrect!.

auth()->config("LOGIN_PASSWORD_ERROR", "Password is incorrect!");

USE_SESSION #

Use session based authentication instead of the default JWT based auth. Without this setting enbled, you can't use any of the session methods below. Default is false.

SESSION_ON_REGISTER #

If true, a session will be created on a successful registration, else you it'll be created on login rather. Default is false.

GUARD_LOGIN #

The page route. Default is /auth/login.

GUARD_REGISTER #

The register page route. Default is /auth/register.

GUARD_LOGOUT #

Logout route handler. Default is /auth/logout.

GUARD_HOME #

Home page route. Default is /home.

SAVE_SESSION_JWT #

Add an auth token to the auth session? This allows you save a generated JWT to the session. You might want to use this if you want to extend your app into an API. Default is false.

TOKEN_LIFETIME #

How long the token can be used before it expires. Default is 1 day.

TOKEN_SECRET #

This is the secret key used to generate tokens for users on signup and register.

Leaf\Auth::session();

Next Steps #