94 |
95 |
96 |
--------------------------------------------------------------------------------
/config/auth.php:
--------------------------------------------------------------------------------
1 | [
17 | 'guard' => 'api',
18 | 'passwords' => 'users',
19 | ],
20 |
21 | /*
22 | |--------------------------------------------------------------------------
23 | | Authentication Guards
24 | |--------------------------------------------------------------------------
25 | |
26 | | Next, you may define every authentication guard for your application.
27 | | Of course, a great default configuration has been defined for you
28 | | here which uses session storage and the Eloquent user provider.
29 | |
30 | | All authentication drivers have a user provider. This defines how the
31 | | users are actually retrieved out of your database or other storage
32 | | mechanisms used by this application to persist your user's data.
33 | |
34 | | Supported: "session", "token"
35 | |
36 | */
37 |
38 | 'guards' => [
39 | 'web' => [
40 | 'driver' => 'session',
41 | 'provider' => 'users',
42 | ],
43 |
44 | 'api' => [
45 | 'driver' => 'jwt',
46 | 'provider' => 'users',
47 | ],
48 | ],
49 |
50 | /*
51 | |--------------------------------------------------------------------------
52 | | User Providers
53 | |--------------------------------------------------------------------------
54 | |
55 | | All authentication drivers have a user provider. This defines how the
56 | | users are actually retrieved out of your database or other storage
57 | | mechanisms used by this application to persist your user's data.
58 | |
59 | | If you have multiple user tables or models you may configure multiple
60 | | sources which represent each model / table. These sources may then
61 | | be assigned to any extra authentication guards you have defined.
62 | |
63 | | Supported: "database", "eloquent"
64 | |
65 | */
66 |
67 | 'providers' => [
68 | 'users' => [
69 | 'driver' => 'eloquent',
70 | 'model' => App\User::class,
71 | ],
72 |
73 | // 'users' => [
74 | // 'driver' => 'database',
75 | // 'table' => 'users',
76 | // ],
77 | ],
78 |
79 | /*
80 | |--------------------------------------------------------------------------
81 | | Resetting Passwords
82 | |--------------------------------------------------------------------------
83 | |
84 | | You may specify multiple password reset configurations if you have more
85 | | than one user table or model in the application and you want to have
86 | | separate password reset settings based on the specific user types.
87 | |
88 | | The expire time is the number of minutes that the reset token should be
89 | | considered valid. This security feature keeps tokens short-lived so
90 | | they have less time to be guessed. You may change this as needed.
91 | |
92 | */
93 |
94 | 'passwords' => [
95 | 'users' => [
96 | 'provider' => 'users',
97 | 'table' => 'password_resets',
98 | 'expire' => 60,
99 | ],
100 | ],
101 |
102 | ];
103 |
--------------------------------------------------------------------------------
/config/database.php:
--------------------------------------------------------------------------------
1 | env('DB_CONNECTION', 'mysql'),
17 |
18 | /*
19 | |--------------------------------------------------------------------------
20 | | Database Connections
21 | |--------------------------------------------------------------------------
22 | |
23 | | Here are each of the database connections setup for your application.
24 | | Of course, examples of configuring each database platform that is
25 | | supported by Laravel is shown below to make development simple.
26 | |
27 | |
28 | | All database work in Laravel is done through the PHP PDO facilities
29 | | so make sure you have the driver for your particular database of
30 | | choice installed on your machine before you begin development.
31 | |
32 | */
33 |
34 | 'connections' => [
35 |
36 | 'sqlite' => [
37 | 'driver' => 'sqlite',
38 | 'database' => env('DB_DATABASE', database_path('database.sqlite')),
39 | 'prefix' => '',
40 | ],
41 |
42 | 'mysql' => [
43 | 'driver' => 'mysql',
44 | 'host' => env('DB_HOST', '127.0.0.1'),
45 | 'port' => env('DB_PORT', '3306'),
46 | 'database' => env('DB_DATABASE', 'forge'),
47 | 'username' => env('DB_USERNAME', 'forge'),
48 | 'password' => env('DB_PASSWORD', ''),
49 | 'unix_socket' => env('DB_SOCKET', ''),
50 | 'charset' => 'utf8mb4',
51 | 'collation' => 'utf8mb4_unicode_ci',
52 | 'prefix' => '',
53 | 'strict' => true,
54 | 'engine' => null,
55 | ],
56 |
57 | 'pgsql' => [
58 | 'driver' => 'pgsql',
59 | 'host' => env('DB_HOST', '127.0.0.1'),
60 | 'port' => env('DB_PORT', '5432'),
61 | 'database' => env('DB_DATABASE', 'forge'),
62 | 'username' => env('DB_USERNAME', 'forge'),
63 | 'password' => env('DB_PASSWORD', ''),
64 | 'charset' => 'utf8',
65 | 'prefix' => '',
66 | 'schema' => 'public',
67 | 'sslmode' => 'prefer',
68 | ],
69 |
70 | 'sqlsrv' => [
71 | 'driver' => 'sqlsrv',
72 | 'host' => env('DB_HOST', 'localhost'),
73 | 'port' => env('DB_PORT', '1433'),
74 | 'database' => env('DB_DATABASE', 'forge'),
75 | 'username' => env('DB_USERNAME', 'forge'),
76 | 'password' => env('DB_PASSWORD', ''),
77 | 'charset' => 'utf8',
78 | 'prefix' => '',
79 | ],
80 |
81 | ],
82 |
83 | /*
84 | |--------------------------------------------------------------------------
85 | | Migration Repository Table
86 | |--------------------------------------------------------------------------
87 | |
88 | | This table keeps track of all the migrations that have already run for
89 | | your application. Using this information, we can determine which of
90 | | the migrations on disk haven't actually been run in the database.
91 | |
92 | */
93 |
94 | 'migrations' => 'migrations',
95 |
96 | /*
97 | |--------------------------------------------------------------------------
98 | | Redis Databases
99 | |--------------------------------------------------------------------------
100 | |
101 | | Redis is an open source, fast, and advanced key-value store that also
102 | | provides a richer set of commands than a typical key-value systems
103 | | such as APC or Memcached. Laravel makes it easy to dig right in.
104 | |
105 | */
106 |
107 | 'redis' => [
108 |
109 | 'client' => 'predis',
110 |
111 | 'default' => [
112 | 'host' => env('REDIS_HOST', '127.0.0.1'),
113 | 'password' => env('REDIS_PASSWORD', null),
114 | 'port' => env('REDIS_PORT', 6379),
115 | 'database' => 0,
116 | ],
117 |
118 | ],
119 |
120 | ];
121 |
--------------------------------------------------------------------------------
/config/mail.php:
--------------------------------------------------------------------------------
1 | env('MAIL_DRIVER', 'smtp'),
20 |
21 | /*
22 | |--------------------------------------------------------------------------
23 | | SMTP Host Address
24 | |--------------------------------------------------------------------------
25 | |
26 | | Here you may provide the host address of the SMTP server used by your
27 | | applications. A default option is provided that is compatible with
28 | | the Mailgun mail service which will provide reliable deliveries.
29 | |
30 | */
31 |
32 | 'host' => env('MAIL_HOST', 'smtp.mailgun.org'),
33 |
34 | /*
35 | |--------------------------------------------------------------------------
36 | | SMTP Host Port
37 | |--------------------------------------------------------------------------
38 | |
39 | | This is the SMTP port used by your application to deliver e-mails to
40 | | users of the application. Like the host we have set this value to
41 | | stay compatible with the Mailgun e-mail application by default.
42 | |
43 | */
44 |
45 | 'port' => env('MAIL_PORT', 587),
46 |
47 | /*
48 | |--------------------------------------------------------------------------
49 | | Global "From" Address
50 | |--------------------------------------------------------------------------
51 | |
52 | | You may wish for all e-mails sent by your application to be sent from
53 | | the same address. Here, you may specify a name and address that is
54 | | used globally for all e-mails that are sent by your application.
55 | |
56 | */
57 |
58 | 'from' => [
59 | 'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'),
60 | 'name' => env('MAIL_FROM_NAME', 'Example'),
61 | ],
62 |
63 | /*
64 | |--------------------------------------------------------------------------
65 | | E-Mail Encryption Protocol
66 | |--------------------------------------------------------------------------
67 | |
68 | | Here you may specify the encryption protocol that should be used when
69 | | the application send e-mail messages. A sensible default using the
70 | | transport layer security protocol should provide great security.
71 | |
72 | */
73 |
74 | 'encryption' => env('MAIL_ENCRYPTION', 'tls'),
75 |
76 | /*
77 | |--------------------------------------------------------------------------
78 | | SMTP Server Username
79 | |--------------------------------------------------------------------------
80 | |
81 | | If your SMTP server requires a username for authentication, you should
82 | | set it here. This will get used to authenticate with your server on
83 | | connection. You may also set the "password" value below this one.
84 | |
85 | */
86 |
87 | 'username' => env('MAIL_USERNAME'),
88 |
89 | 'password' => env('MAIL_PASSWORD'),
90 |
91 | /*
92 | |--------------------------------------------------------------------------
93 | | Sendmail System Path
94 | |--------------------------------------------------------------------------
95 | |
96 | | When using the "sendmail" driver to send e-mails, we will need to know
97 | | the path to where Sendmail lives on this server. A default path has
98 | | been provided here, which will work well on most of your systems.
99 | |
100 | */
101 |
102 | 'sendmail' => '/usr/sbin/sendmail -bs',
103 |
104 | /*
105 | |--------------------------------------------------------------------------
106 | | Markdown Mail Settings
107 | |--------------------------------------------------------------------------
108 | |
109 | | If you are using Markdown based email rendering, you may configure your
110 | | theme and component paths here, allowing you to customize the design
111 | | of the emails. Or, you may simply stick with the Laravel defaults!
112 | |
113 | */
114 |
115 | 'markdown' => [
116 | 'theme' => 'default',
117 |
118 | 'paths' => [
119 | resource_path('views/vendor/mail'),
120 | ],
121 | ],
122 |
123 | ];
124 |
--------------------------------------------------------------------------------
/Laravel - Book Reviews API.postman_collection.json:
--------------------------------------------------------------------------------
1 | {
2 | "info": {
3 | "_postman_id": "c0a85fcd-13e3-4ce3-967c-1dee202f53ad",
4 | "name": "Laravel - Book Reviews API",
5 | "description": "Laravel - Book Reviews API",
6 | "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
7 | },
8 | "item": [
9 | {
10 | "name": "Register New User",
11 | "request": {
12 | "method": "POST",
13 | "header": [],
14 | "body": {
15 | "mode": "raw",
16 | "raw": "{\n\t\"name\": \"Uzumaki Naruto\",\n\t\"email\": \"uzumaki_naruto@konohagakure.co.jp\",\n\t\"password\": \"naruto\"\n}",
17 | "options": {
18 | "raw": {
19 | "language": "json"
20 | }
21 | }
22 | },
23 | "url": {
24 | "raw": "http://localhost:8000/api/register",
25 | "protocol": "http",
26 | "host": [
27 | "localhost"
28 | ],
29 | "port": "8000",
30 | "path": [
31 | "api",
32 | "register"
33 | ]
34 | },
35 | "description": "Register New User"
36 | },
37 | "response": []
38 | },
39 | {
40 | "name": "User Login ",
41 | "request": {
42 | "method": "POST",
43 | "header": [],
44 | "body": {
45 | "mode": "raw",
46 | "raw": "{\n\t\"email\": \"uzumaki_naruto@konohagakure.co.jp\",\n\t\"password\": \"naruto\"\n}",
47 | "options": {
48 | "raw": {
49 | "language": "json"
50 | }
51 | }
52 | },
53 | "url": {
54 | "raw": "http://localhost:8000/api/login",
55 | "protocol": "http",
56 | "host": [
57 | "localhost"
58 | ],
59 | "port": "8000",
60 | "path": [
61 | "api",
62 | "login"
63 | ]
64 | },
65 | "description": "User Login "
66 | },
67 | "response": []
68 | },
69 | {
70 | "name": "Add New Book",
71 | "request": {
72 | "auth": {
73 | "type": "bearer",
74 | "bearer": [
75 | {
76 | "key": "token",
77 | "value": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9sb2NhbGhvc3Q6ODAwMFwvYXBpXC9sb2dpbiIsImlhdCI6MTU4OTA3NjA5OCwiZXhwIjoxNTg5MDc5Njk4LCJuYmYiOjE1ODkwNzYwOTgsImp0aSI6IlB5MkNKcmtuN3lON2tTTk0iLCJzdWIiOjEsInBydiI6Ijg3ZTBhZjFlZjlmZDE1ODEyZmRlYzk3MTUzYTE0ZTBiMDQ3NTQ2YWEifQ.3qExs0fIViol8Bm64ZczEiiAr5XAjgWVCoy3sWzCJ4o",
78 | "type": "string"
79 | }
80 | ]
81 | },
82 | "method": "POST",
83 | "header": [],
84 | "body": {
85 | "mode": "raw",
86 | "raw": "{\n\t\"title\" : \"Belajar Laravel Mudah\",\n\t\"description\": \"Belajar Laravel Mudah description\"\n}",
87 | "options": {
88 | "raw": {
89 | "language": "json"
90 | }
91 | }
92 | },
93 | "url": {
94 | "raw": "http://localhost:8000/api/books",
95 | "protocol": "http",
96 | "host": [
97 | "localhost"
98 | ],
99 | "port": "8000",
100 | "path": [
101 | "api",
102 | "books"
103 | ]
104 | },
105 | "description": "Add New Book"
106 | },
107 | "response": []
108 | },
109 | {
110 | "name": "Get List Books",
111 | "request": {
112 | "auth": {
113 | "type": "bearer",
114 | "bearer": [
115 | {
116 | "key": "token",
117 | "value": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9sb2NhbGhvc3Q6ODAwMFwvYXBpXC9sb2dpbiIsImlhdCI6MTU4OTA3NjA5OCwiZXhwIjoxNTg5MDc5Njk4LCJuYmYiOjE1ODkwNzYwOTgsImp0aSI6IlB5MkNKcmtuN3lON2tTTk0iLCJzdWIiOjEsInBydiI6Ijg3ZTBhZjFlZjlmZDE1ODEyZmRlYzk3MTUzYTE0ZTBiMDQ3NTQ2YWEifQ.3qExs0fIViol8Bm64ZczEiiAr5XAjgWVCoy3sWzCJ4o",
118 | "type": "string"
119 | }
120 | ]
121 | },
122 | "method": "GET",
123 | "header": [],
124 | "url": {
125 | "raw": "http://localhost:8000/api/books",
126 | "protocol": "http",
127 | "host": [
128 | "localhost"
129 | ],
130 | "port": "8000",
131 | "path": [
132 | "api",
133 | "books"
134 | ]
135 | },
136 | "description": "Get List Books"
137 | },
138 | "response": []
139 | },
140 | {
141 | "name": "Update a Book",
142 | "request": {
143 | "auth": {
144 | "type": "bearer",
145 | "bearer": [
146 | {
147 | "key": "token",
148 | "value": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9sb2NhbGhvc3Q6ODAwMFwvYXBpXC9sb2dpbiIsImlhdCI6MTU4OTA3NjA5OCwiZXhwIjoxNTg5MDc5Njk4LCJuYmYiOjE1ODkwNzYwOTgsImp0aSI6IlB5MkNKcmtuN3lON2tTTk0iLCJzdWIiOjEsInBydiI6Ijg3ZTBhZjFlZjlmZDE1ODEyZmRlYzk3MTUzYTE0ZTBiMDQ3NTQ2YWEifQ.3qExs0fIViol8Bm64ZczEiiAr5XAjgWVCoy3sWzCJ4o",
149 | "type": "string"
150 | }
151 | ]
152 | },
153 | "method": "PUT",
154 | "header": [],
155 | "body": {
156 | "mode": "raw",
157 | "raw": "{\n \"title\": \"Belajar Python Mudah - Updated\",\n \"description\": \"Belajar Python Mudah description - Updated\"\n}",
158 | "options": {
159 | "raw": {
160 | "language": "json"
161 | }
162 | }
163 | },
164 | "url": {
165 | "raw": "http://localhost:8000/api/books/4",
166 | "protocol": "http",
167 | "host": [
168 | "localhost"
169 | ],
170 | "port": "8000",
171 | "path": [
172 | "api",
173 | "books",
174 | "4"
175 | ]
176 | },
177 | "description": "Update a Book"
178 | },
179 | "response": []
180 | },
181 | {
182 | "name": "Add Book Rating",
183 | "request": {
184 | "auth": {
185 | "type": "bearer",
186 | "bearer": [
187 | {
188 | "key": "token",
189 | "value": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9sb2NhbGhvc3Q6ODAwMFwvYXBpXC9sb2dpbiIsImlhdCI6MTU4OTA3NjA5OCwiZXhwIjoxNTg5MDc5Njk4LCJuYmYiOjE1ODkwNzYwOTgsImp0aSI6IlB5MkNKcmtuN3lON2tTTk0iLCJzdWIiOjEsInBydiI6Ijg3ZTBhZjFlZjlmZDE1ODEyZmRlYzk3MTUzYTE0ZTBiMDQ3NTQ2YWEifQ.3qExs0fIViol8Bm64ZczEiiAr5XAjgWVCoy3sWzCJ4o",
190 | "type": "string"
191 | }
192 | ]
193 | },
194 | "method": "POST",
195 | "header": [],
196 | "body": {
197 | "mode": "raw",
198 | "raw": "{\n \"rating\": 4\n}",
199 | "options": {
200 | "raw": {
201 | "language": "json"
202 | }
203 | }
204 | },
205 | "url": {
206 | "raw": "http://localhost:8000/api/books/4/ratings",
207 | "protocol": "http",
208 | "host": [
209 | "localhost"
210 | ],
211 | "port": "8000",
212 | "path": [
213 | "api",
214 | "books",
215 | "4",
216 | "ratings"
217 | ]
218 | },
219 | "description": "Add Book Rating"
220 | },
221 | "response": []
222 | }
223 | ],
224 | "protocolProfileBehavior": {}
225 | }
--------------------------------------------------------------------------------
/resources/lang/en/validation.php:
--------------------------------------------------------------------------------
1 | 'The :attribute must be accepted.',
17 | 'active_url' => 'The :attribute is not a valid URL.',
18 | 'after' => 'The :attribute must be a date after :date.',
19 | 'after_or_equal' => 'The :attribute must be a date after or equal to :date.',
20 | 'alpha' => 'The :attribute may only contain letters.',
21 | 'alpha_dash' => 'The :attribute may only contain letters, numbers, and dashes.',
22 | 'alpha_num' => 'The :attribute may only contain letters and numbers.',
23 | 'array' => 'The :attribute must be an array.',
24 | 'before' => 'The :attribute must be a date before :date.',
25 | 'before_or_equal' => 'The :attribute must be a date before or equal to :date.',
26 | 'between' => [
27 | 'numeric' => 'The :attribute must be between :min and :max.',
28 | 'file' => 'The :attribute must be between :min and :max kilobytes.',
29 | 'string' => 'The :attribute must be between :min and :max characters.',
30 | 'array' => 'The :attribute must have between :min and :max items.',
31 | ],
32 | 'boolean' => 'The :attribute field must be true or false.',
33 | 'confirmed' => 'The :attribute confirmation does not match.',
34 | 'date' => 'The :attribute is not a valid date.',
35 | 'date_format' => 'The :attribute does not match the format :format.',
36 | 'different' => 'The :attribute and :other must be different.',
37 | 'digits' => 'The :attribute must be :digits digits.',
38 | 'digits_between' => 'The :attribute must be between :min and :max digits.',
39 | 'dimensions' => 'The :attribute has invalid image dimensions.',
40 | 'distinct' => 'The :attribute field has a duplicate value.',
41 | 'email' => 'The :attribute must be a valid email address.',
42 | 'exists' => 'The selected :attribute is invalid.',
43 | 'file' => 'The :attribute must be a file.',
44 | 'filled' => 'The :attribute field must have a value.',
45 | 'image' => 'The :attribute must be an image.',
46 | 'in' => 'The selected :attribute is invalid.',
47 | 'in_array' => 'The :attribute field does not exist in :other.',
48 | 'integer' => 'The :attribute must be an integer.',
49 | 'ip' => 'The :attribute must be a valid IP address.',
50 | 'ipv4' => 'The :attribute must be a valid IPv4 address.',
51 | 'ipv6' => 'The :attribute must be a valid IPv6 address.',
52 | 'json' => 'The :attribute must be a valid JSON string.',
53 | 'max' => [
54 | 'numeric' => 'The :attribute may not be greater than :max.',
55 | 'file' => 'The :attribute may not be greater than :max kilobytes.',
56 | 'string' => 'The :attribute may not be greater than :max characters.',
57 | 'array' => 'The :attribute may not have more than :max items.',
58 | ],
59 | 'mimes' => 'The :attribute must be a file of type: :values.',
60 | 'mimetypes' => 'The :attribute must be a file of type: :values.',
61 | 'min' => [
62 | 'numeric' => 'The :attribute must be at least :min.',
63 | 'file' => 'The :attribute must be at least :min kilobytes.',
64 | 'string' => 'The :attribute must be at least :min characters.',
65 | 'array' => 'The :attribute must have at least :min items.',
66 | ],
67 | 'not_in' => 'The selected :attribute is invalid.',
68 | 'numeric' => 'The :attribute must be a number.',
69 | 'present' => 'The :attribute field must be present.',
70 | 'regex' => 'The :attribute format is invalid.',
71 | 'required' => 'The :attribute field is required.',
72 | 'required_if' => 'The :attribute field is required when :other is :value.',
73 | 'required_unless' => 'The :attribute field is required unless :other is in :values.',
74 | 'required_with' => 'The :attribute field is required when :values is present.',
75 | 'required_with_all' => 'The :attribute field is required when :values is present.',
76 | 'required_without' => 'The :attribute field is required when :values is not present.',
77 | 'required_without_all' => 'The :attribute field is required when none of :values are present.',
78 | 'same' => 'The :attribute and :other must match.',
79 | 'size' => [
80 | 'numeric' => 'The :attribute must be :size.',
81 | 'file' => 'The :attribute must be :size kilobytes.',
82 | 'string' => 'The :attribute must be :size characters.',
83 | 'array' => 'The :attribute must contain :size items.',
84 | ],
85 | 'string' => 'The :attribute must be a string.',
86 | 'timezone' => 'The :attribute must be a valid zone.',
87 | 'unique' => 'The :attribute has already been taken.',
88 | 'uploaded' => 'The :attribute failed to upload.',
89 | 'url' => 'The :attribute format is invalid.',
90 |
91 | /*
92 | |--------------------------------------------------------------------------
93 | | Custom Validation Language Lines
94 | |--------------------------------------------------------------------------
95 | |
96 | | Here you may specify custom validation messages for attributes using the
97 | | convention "attribute.rule" to name the lines. This makes it quick to
98 | | specify a specific custom language line for a given attribute rule.
99 | |
100 | */
101 |
102 | 'custom' => [
103 | 'attribute-name' => [
104 | 'rule-name' => 'custom-message',
105 | ],
106 | ],
107 |
108 | /*
109 | |--------------------------------------------------------------------------
110 | | Custom Validation Attributes
111 | |--------------------------------------------------------------------------
112 | |
113 | | The following language lines are used to swap attribute place-holders
114 | | with something more reader friendly such as E-Mail Address instead
115 | | of "email". This simply helps us make messages a little cleaner.
116 | |
117 | */
118 |
119 | 'attributes' => [],
120 |
121 | ];
122 |
--------------------------------------------------------------------------------
/config/session.php:
--------------------------------------------------------------------------------
1 | env('SESSION_DRIVER', 'file'),
20 |
21 | /*
22 | |--------------------------------------------------------------------------
23 | | Session Lifetime
24 | |--------------------------------------------------------------------------
25 | |
26 | | Here you may specify the number of minutes that you wish the session
27 | | to be allowed to remain idle before it expires. If you want them
28 | | to immediately expire on the browser closing, set that option.
29 | |
30 | */
31 |
32 | 'lifetime' => env('SESSION_LIFETIME', 120),
33 |
34 | 'expire_on_close' => false,
35 |
36 | /*
37 | |--------------------------------------------------------------------------
38 | | Session Encryption
39 | |--------------------------------------------------------------------------
40 | |
41 | | This option allows you to easily specify that all of your session data
42 | | should be encrypted before it is stored. All encryption will be run
43 | | automatically by Laravel and you can use the Session like normal.
44 | |
45 | */
46 |
47 | 'encrypt' => false,
48 |
49 | /*
50 | |--------------------------------------------------------------------------
51 | | Session File Location
52 | |--------------------------------------------------------------------------
53 | |
54 | | When using the native session driver, we need a location where session
55 | | files may be stored. A default has been set for you but a different
56 | | location may be specified. This is only needed for file sessions.
57 | |
58 | */
59 |
60 | 'files' => storage_path('framework/sessions'),
61 |
62 | /*
63 | |--------------------------------------------------------------------------
64 | | Session Database Connection
65 | |--------------------------------------------------------------------------
66 | |
67 | | When using the "database" or "redis" session drivers, you may specify a
68 | | connection that should be used to manage these sessions. This should
69 | | correspond to a connection in your database configuration options.
70 | |
71 | */
72 |
73 | 'connection' => null,
74 |
75 | /*
76 | |--------------------------------------------------------------------------
77 | | Session Database Table
78 | |--------------------------------------------------------------------------
79 | |
80 | | When using the "database" session driver, you may specify the table we
81 | | should use to manage the sessions. Of course, a sensible default is
82 | | provided for you; however, you are free to change this as needed.
83 | |
84 | */
85 |
86 | 'table' => 'sessions',
87 |
88 | /*
89 | |--------------------------------------------------------------------------
90 | | Session Cache Store
91 | |--------------------------------------------------------------------------
92 | |
93 | | When using the "apc" or "memcached" session drivers, you may specify a
94 | | cache store that should be used for these sessions. This value must
95 | | correspond with one of the application's configured cache stores.
96 | |
97 | */
98 |
99 | 'store' => null,
100 |
101 | /*
102 | |--------------------------------------------------------------------------
103 | | Session Sweeping Lottery
104 | |--------------------------------------------------------------------------
105 | |
106 | | Some session drivers must manually sweep their storage location to get
107 | | rid of old sessions from storage. Here are the chances that it will
108 | | happen on a given request. By default, the odds are 2 out of 100.
109 | |
110 | */
111 |
112 | 'lottery' => [2, 100],
113 |
114 | /*
115 | |--------------------------------------------------------------------------
116 | | Session Cookie Name
117 | |--------------------------------------------------------------------------
118 | |
119 | | Here you may change the name of the cookie used to identify a session
120 | | instance by ID. The name specified here will get used every time a
121 | | new session cookie is created by the framework for every driver.
122 | |
123 | */
124 |
125 | 'cookie' => env(
126 | 'SESSION_COOKIE',
127 | str_slug(env('APP_NAME', 'laravel'), '_').'_session'
128 | ),
129 |
130 | /*
131 | |--------------------------------------------------------------------------
132 | | Session Cookie Path
133 | |--------------------------------------------------------------------------
134 | |
135 | | The session cookie path determines the path for which the cookie will
136 | | be regarded as available. Typically, this will be the root path of
137 | | your application but you are free to change this when necessary.
138 | |
139 | */
140 |
141 | 'path' => '/',
142 |
143 | /*
144 | |--------------------------------------------------------------------------
145 | | Session Cookie Domain
146 | |--------------------------------------------------------------------------
147 | |
148 | | Here you may change the domain of the cookie used to identify a session
149 | | in your application. This will determine which domains the cookie is
150 | | available to in your application. A sensible default has been set.
151 | |
152 | */
153 |
154 | 'domain' => env('SESSION_DOMAIN', null),
155 |
156 | /*
157 | |--------------------------------------------------------------------------
158 | | HTTPS Only Cookies
159 | |--------------------------------------------------------------------------
160 | |
161 | | By setting this option to true, session cookies will only be sent back
162 | | to the server if the browser has a HTTPS connection. This will keep
163 | | the cookie from being sent to you if it can not be done securely.
164 | |
165 | */
166 |
167 | 'secure' => env('SESSION_SECURE_COOKIE', false),
168 |
169 | /*
170 | |--------------------------------------------------------------------------
171 | | HTTP Access Only
172 | |--------------------------------------------------------------------------
173 | |
174 | | Setting this value to true will prevent JavaScript from accessing the
175 | | value of the cookie and the cookie will only be accessible through
176 | | the HTTP protocol. You are free to modify this option if needed.
177 | |
178 | */
179 |
180 | 'http_only' => true,
181 |
182 | /*
183 | |--------------------------------------------------------------------------
184 | | Same-Site Cookies
185 | |--------------------------------------------------------------------------
186 | |
187 | | This option determines how your cookies behave when cross-site requests
188 | | take place, and can be used to mitigate CSRF attacks. By default, we
189 | | do not enable this as other CSRF protection services are in place.
190 | |
191 | | Supported: "lax", "strict"
192 | |
193 | */
194 |
195 | 'same_site' => null,
196 |
197 | ];
198 |
--------------------------------------------------------------------------------
/config/app.php:
--------------------------------------------------------------------------------
1 | env('APP_NAME', 'Laravel'),
17 |
18 | /*
19 | |--------------------------------------------------------------------------
20 | | Application Environment
21 | |--------------------------------------------------------------------------
22 | |
23 | | This value determines the "environment" your application is currently
24 | | running in. This may determine how you prefer to configure various
25 | | services your application utilizes. Set this in your ".env" file.
26 | |
27 | */
28 |
29 | 'env' => env('APP_ENV', 'production'),
30 |
31 | /*
32 | |--------------------------------------------------------------------------
33 | | Application Debug Mode
34 | |--------------------------------------------------------------------------
35 | |
36 | | When your application is in debug mode, detailed error messages with
37 | | stack traces will be shown on every error that occurs within your
38 | | application. If disabled, a simple generic error page is shown.
39 | |
40 | */
41 |
42 | 'debug' => env('APP_DEBUG', false),
43 |
44 | /*
45 | |--------------------------------------------------------------------------
46 | | Application URL
47 | |--------------------------------------------------------------------------
48 | |
49 | | This URL is used by the console to properly generate URLs when using
50 | | the Artisan command line tool. You should set this to the root of
51 | | your application so that it is used when running Artisan tasks.
52 | |
53 | */
54 |
55 | 'url' => env('APP_URL', 'http://localhost'),
56 |
57 | /*
58 | |--------------------------------------------------------------------------
59 | | Application Timezone
60 | |--------------------------------------------------------------------------
61 | |
62 | | Here you may specify the default timezone for your application, which
63 | | will be used by the PHP date and date-time functions. We have gone
64 | | ahead and set this to a sensible default for you out of the box.
65 | |
66 | */
67 |
68 | 'timezone' => 'UTC',
69 |
70 | /*
71 | |--------------------------------------------------------------------------
72 | | Application Locale Configuration
73 | |--------------------------------------------------------------------------
74 | |
75 | | The application locale determines the default locale that will be used
76 | | by the translation service provider. You are free to set this value
77 | | to any of the locales which will be supported by the application.
78 | |
79 | */
80 |
81 | 'locale' => 'en',
82 |
83 | /*
84 | |--------------------------------------------------------------------------
85 | | Application Fallback Locale
86 | |--------------------------------------------------------------------------
87 | |
88 | | The fallback locale determines the locale to use when the current one
89 | | is not available. You may change the value to correspond to any of
90 | | the language folders that are provided through your application.
91 | |
92 | */
93 |
94 | 'fallback_locale' => 'en',
95 |
96 | /*
97 | |--------------------------------------------------------------------------
98 | | Encryption Key
99 | |--------------------------------------------------------------------------
100 | |
101 | | This key is used by the Illuminate encrypter service and should be set
102 | | to a random, 32 character string, otherwise these encrypted strings
103 | | will not be safe. Please do this before deploying an application!
104 | |
105 | */
106 |
107 | 'key' => env('APP_KEY'),
108 |
109 | 'cipher' => 'AES-256-CBC',
110 |
111 | /*
112 | |--------------------------------------------------------------------------
113 | | Logging Configuration
114 | |--------------------------------------------------------------------------
115 | |
116 | | Here you may configure the log settings for your application. Out of
117 | | the box, Laravel uses the Monolog PHP logging library. This gives
118 | | you a variety of powerful log handlers / formatters to utilize.
119 | |
120 | | Available Settings: "single", "daily", "syslog", "errorlog"
121 | |
122 | */
123 |
124 | 'log' => env('APP_LOG', 'single'),
125 |
126 | 'log_level' => env('APP_LOG_LEVEL', 'debug'),
127 |
128 | /*
129 | |--------------------------------------------------------------------------
130 | | Autoloaded Service Providers
131 | |--------------------------------------------------------------------------
132 | |
133 | | The service providers listed here will be automatically loaded on the
134 | | request to your application. Feel free to add your own services to
135 | | this array to grant expanded functionality to your applications.
136 | |
137 | */
138 |
139 | 'providers' => [
140 |
141 | /*
142 | * Laravel Framework Service Providers...
143 | */
144 | Illuminate\Auth\AuthServiceProvider::class,
145 | Illuminate\Broadcasting\BroadcastServiceProvider::class,
146 | Illuminate\Bus\BusServiceProvider::class,
147 | Illuminate\Cache\CacheServiceProvider::class,
148 | Illuminate\Foundation\Providers\ConsoleSupportServiceProvider::class,
149 | Illuminate\Cookie\CookieServiceProvider::class,
150 | Illuminate\Database\DatabaseServiceProvider::class,
151 | Illuminate\Encryption\EncryptionServiceProvider::class,
152 | Illuminate\Filesystem\FilesystemServiceProvider::class,
153 | Illuminate\Foundation\Providers\FoundationServiceProvider::class,
154 | Illuminate\Hashing\HashServiceProvider::class,
155 | Illuminate\Mail\MailServiceProvider::class,
156 | Illuminate\Notifications\NotificationServiceProvider::class,
157 | Illuminate\Pagination\PaginationServiceProvider::class,
158 | Illuminate\Pipeline\PipelineServiceProvider::class,
159 | Illuminate\Queue\QueueServiceProvider::class,
160 | Illuminate\Redis\RedisServiceProvider::class,
161 | Illuminate\Auth\Passwords\PasswordResetServiceProvider::class,
162 | Illuminate\Session\SessionServiceProvider::class,
163 | Illuminate\Translation\TranslationServiceProvider::class,
164 | Illuminate\Validation\ValidationServiceProvider::class,
165 | Illuminate\View\ViewServiceProvider::class,
166 |
167 | /*
168 | * Package Service Providers...
169 | */
170 |
171 | /*
172 | * Application Service Providers...
173 | */
174 | App\Providers\AppServiceProvider::class,
175 | App\Providers\AuthServiceProvider::class,
176 | // App\Providers\BroadcastServiceProvider::class,
177 | App\Providers\EventServiceProvider::class,
178 | App\Providers\RouteServiceProvider::class,
179 |
180 | ],
181 |
182 | /*
183 | |--------------------------------------------------------------------------
184 | | Class Aliases
185 | |--------------------------------------------------------------------------
186 | |
187 | | This array of class aliases will be registered when this application
188 | | is started. However, feel free to register as many as you wish as
189 | | the aliases are "lazy" loaded so they don't hinder performance.
190 | |
191 | */
192 |
193 | 'aliases' => [
194 |
195 | 'App' => Illuminate\Support\Facades\App::class,
196 | 'Artisan' => Illuminate\Support\Facades\Artisan::class,
197 | 'Auth' => Illuminate\Support\Facades\Auth::class,
198 | 'Blade' => Illuminate\Support\Facades\Blade::class,
199 | 'Broadcast' => Illuminate\Support\Facades\Broadcast::class,
200 | 'Bus' => Illuminate\Support\Facades\Bus::class,
201 | 'Cache' => Illuminate\Support\Facades\Cache::class,
202 | 'Config' => Illuminate\Support\Facades\Config::class,
203 | 'Cookie' => Illuminate\Support\Facades\Cookie::class,
204 | 'Crypt' => Illuminate\Support\Facades\Crypt::class,
205 | 'DB' => Illuminate\Support\Facades\DB::class,
206 | 'Eloquent' => Illuminate\Database\Eloquent\Model::class,
207 | 'Event' => Illuminate\Support\Facades\Event::class,
208 | 'File' => Illuminate\Support\Facades\File::class,
209 | 'Gate' => Illuminate\Support\Facades\Gate::class,
210 | 'Hash' => Illuminate\Support\Facades\Hash::class,
211 | 'Lang' => Illuminate\Support\Facades\Lang::class,
212 | 'Log' => Illuminate\Support\Facades\Log::class,
213 | 'Mail' => Illuminate\Support\Facades\Mail::class,
214 | 'Notification' => Illuminate\Support\Facades\Notification::class,
215 | 'Password' => Illuminate\Support\Facades\Password::class,
216 | 'Queue' => Illuminate\Support\Facades\Queue::class,
217 | 'Redirect' => Illuminate\Support\Facades\Redirect::class,
218 | 'Redis' => Illuminate\Support\Facades\Redis::class,
219 | 'Request' => Illuminate\Support\Facades\Request::class,
220 | 'Response' => Illuminate\Support\Facades\Response::class,
221 | 'Route' => Illuminate\Support\Facades\Route::class,
222 | 'Schema' => Illuminate\Support\Facades\Schema::class,
223 | 'Session' => Illuminate\Support\Facades\Session::class,
224 | 'Storage' => Illuminate\Support\Facades\Storage::class,
225 | 'URL' => Illuminate\Support\Facades\URL::class,
226 | 'Validator' => Illuminate\Support\Facades\Validator::class,
227 | 'View' => Illuminate\Support\Facades\View::class,
228 |
229 | ],
230 |
231 | ];
232 |
--------------------------------------------------------------------------------
/config/jwt.php:
--------------------------------------------------------------------------------
1 |
7 | *
8 | * For the full copyright and license information, please view the LICENSE
9 | * file that was distributed with this source code.
10 | */
11 |
12 | return [
13 |
14 | /*
15 | |--------------------------------------------------------------------------
16 | | JWT Authentication Secret
17 | |--------------------------------------------------------------------------
18 | |
19 | | Don't forget to set this in your .env file, as it will be used to sign
20 | | your tokens. A helper command is provided for this:
21 | | `php artisan jwt:secret`
22 | |
23 | | Note: This will be used for Symmetric algorithms only (HMAC),
24 | | since RSA and ECDSA use a private/public key combo (See below).
25 | |
26 | */
27 |
28 | 'secret' => env('JWT_SECRET'),
29 |
30 | /*
31 | |--------------------------------------------------------------------------
32 | | JWT Authentication Keys
33 | |--------------------------------------------------------------------------
34 | |
35 | | The algorithm you are using, will determine whether your tokens are
36 | | signed with a random string (defined in `JWT_SECRET`) or using the
37 | | following public & private keys.
38 | |
39 | | Symmetric Algorithms:
40 | | HS256, HS384 & HS512 will use `JWT_SECRET`.
41 | |
42 | | Asymmetric Algorithms:
43 | | RS256, RS384 & RS512 / ES256, ES384 & ES512 will use the keys below.
44 | |
45 | */
46 |
47 | 'keys' => [
48 |
49 | /*
50 | |--------------------------------------------------------------------------
51 | | Public Key
52 | |--------------------------------------------------------------------------
53 | |
54 | | A path or resource to your public key.
55 | |
56 | | E.g. 'file://path/to/public/key'
57 | |
58 | */
59 |
60 | 'public' => env('JWT_PUBLIC_KEY'),
61 |
62 | /*
63 | |--------------------------------------------------------------------------
64 | | Private Key
65 | |--------------------------------------------------------------------------
66 | |
67 | | A path or resource to your private key.
68 | |
69 | | E.g. 'file://path/to/private/key'
70 | |
71 | */
72 |
73 | 'private' => env('JWT_PRIVATE_KEY'),
74 |
75 | /*
76 | |--------------------------------------------------------------------------
77 | | Passphrase
78 | |--------------------------------------------------------------------------
79 | |
80 | | The passphrase for your private key. Can be null if none set.
81 | |
82 | */
83 |
84 | 'passphrase' => env('JWT_PASSPHRASE'),
85 |
86 | ],
87 |
88 | /*
89 | |--------------------------------------------------------------------------
90 | | JWT time to live
91 | |--------------------------------------------------------------------------
92 | |
93 | | Specify the length of time (in minutes) that the token will be valid for.
94 | | Defaults to 1 hour.
95 | |
96 | | You can also set this to null, to yield a never expiring token.
97 | | Some people may want this behaviour for e.g. a mobile app.
98 | | This is not particularly recommended, so make sure you have appropriate
99 | | systems in place to revoke the token if necessary.
100 | |
101 | */
102 |
103 | 'ttl' => env('JWT_TTL', 60),
104 |
105 | /*
106 | |--------------------------------------------------------------------------
107 | | Refresh time to live
108 | |--------------------------------------------------------------------------
109 | |
110 | | Specify the length of time (in minutes) that the token can be refreshed
111 | | within. I.E. The user can refresh their token within a 2 week window of
112 | | the original token being created until they must re-authenticate.
113 | | Defaults to 2 weeks.
114 | |
115 | | You can also set this to null, to yield an infinite refresh time.
116 | | Some may want this instead of never expiring tokens for e.g. a mobile app.
117 | | This is not particularly recommended, so make sure you have appropriate
118 | | systems in place to revoke the token if necessary.
119 | |
120 | */
121 |
122 | 'refresh_ttl' => env('JWT_REFRESH_TTL', 20160),
123 |
124 | /*
125 | |--------------------------------------------------------------------------
126 | | JWT hashing algorithm
127 | |--------------------------------------------------------------------------
128 | |
129 | | Specify the hashing algorithm that will be used to sign the token.
130 | |
131 | | See here: https://github.com/namshi/jose/tree/master/src/Namshi/JOSE/Signer/OpenSSL
132 | | for possible values.
133 | |
134 | */
135 |
136 | 'algo' => env('JWT_ALGO', 'HS256'),
137 |
138 | /*
139 | |--------------------------------------------------------------------------
140 | | Required Claims
141 | |--------------------------------------------------------------------------
142 | |
143 | | Specify the required claims that must exist in any token.
144 | | A TokenInvalidException will be thrown if any of these claims are not
145 | | present in the payload.
146 | |
147 | */
148 |
149 | 'required_claims' => [
150 | 'iss',
151 | 'iat',
152 | 'exp',
153 | 'nbf',
154 | 'sub',
155 | 'jti',
156 | ],
157 |
158 | /*
159 | |--------------------------------------------------------------------------
160 | | Persistent Claims
161 | |--------------------------------------------------------------------------
162 | |
163 | | Specify the claim keys to be persisted when refreshing a token.
164 | | `sub` and `iat` will automatically be persisted, in
165 | | addition to the these claims.
166 | |
167 | | Note: If a claim does not exist then it will be ignored.
168 | |
169 | */
170 |
171 | 'persistent_claims' => [
172 | // 'foo',
173 | // 'bar',
174 | ],
175 |
176 | /*
177 | |--------------------------------------------------------------------------
178 | | Lock Subject
179 | |--------------------------------------------------------------------------
180 | |
181 | | This will determine whether a `prv` claim is automatically added to
182 | | the token. The purpose of this is to ensure that if you have multiple
183 | | authentication models e.g. `App\User` & `App\OtherPerson`, then we
184 | | should prevent one authentication request from impersonating another,
185 | | if 2 tokens happen to have the same id across the 2 different models.
186 | |
187 | | Under specific circumstances, you may want to disable this behaviour
188 | | e.g. if you only have one authentication model, then you would save
189 | | a little on token size.
190 | |
191 | */
192 |
193 | 'lock_subject' => true,
194 |
195 | /*
196 | |--------------------------------------------------------------------------
197 | | Leeway
198 | |--------------------------------------------------------------------------
199 | |
200 | | This property gives the jwt timestamp claims some "leeway".
201 | | Meaning that if you have any unavoidable slight clock skew on
202 | | any of your servers then this will afford you some level of cushioning.
203 | |
204 | | This applies to the claims `iat`, `nbf` and `exp`.
205 | |
206 | | Specify in seconds - only if you know you need it.
207 | |
208 | */
209 |
210 | 'leeway' => env('JWT_LEEWAY', 0),
211 |
212 | /*
213 | |--------------------------------------------------------------------------
214 | | Blacklist Enabled
215 | |--------------------------------------------------------------------------
216 | |
217 | | In order to invalidate tokens, you must have the blacklist enabled.
218 | | If you do not want or need this functionality, then set this to false.
219 | |
220 | */
221 |
222 | 'blacklist_enabled' => env('JWT_BLACKLIST_ENABLED', true),
223 |
224 | /*
225 | | -------------------------------------------------------------------------
226 | | Blacklist Grace Period
227 | | -------------------------------------------------------------------------
228 | |
229 | | When multiple concurrent requests are made with the same JWT,
230 | | it is possible that some of them fail, due to token regeneration
231 | | on every request.
232 | |
233 | | Set grace period in seconds to prevent parallel request failure.
234 | |
235 | */
236 |
237 | 'blacklist_grace_period' => env('JWT_BLACKLIST_GRACE_PERIOD', 0),
238 |
239 | /*
240 | |--------------------------------------------------------------------------
241 | | Cookies encryption
242 | |--------------------------------------------------------------------------
243 | |
244 | | By default Laravel encrypt cookies for security reason.
245 | | If you decide to not decrypt cookies, you will have to configure Laravel
246 | | to not encrypt your cookie token by adding its name into the $except
247 | | array available in the middleware "EncryptCookies" provided by Laravel.
248 | | see https://laravel.com/docs/master/responses#cookies-and-encryption
249 | | for details.
250 | |
251 | | Set it to true if you want to decrypt cookies.
252 | |
253 | */
254 |
255 | 'decrypt_cookies' => false,
256 |
257 | /*
258 | |--------------------------------------------------------------------------
259 | | Providers
260 | |--------------------------------------------------------------------------
261 | |
262 | | Specify the various providers used throughout the package.
263 | |
264 | */
265 |
266 | 'providers' => [
267 |
268 | /*
269 | |--------------------------------------------------------------------------
270 | | JWT Provider
271 | |--------------------------------------------------------------------------
272 | |
273 | | Specify the provider that is used to create and decode the tokens.
274 | |
275 | */
276 |
277 | 'jwt' => Tymon\JWTAuth\Providers\JWT\Lcobucci::class,
278 |
279 | /*
280 | |--------------------------------------------------------------------------
281 | | Authentication Provider
282 | |--------------------------------------------------------------------------
283 | |
284 | | Specify the provider that is used to authenticate users.
285 | |
286 | */
287 |
288 | 'auth' => Tymon\JWTAuth\Providers\Auth\Illuminate::class,
289 |
290 | /*
291 | |--------------------------------------------------------------------------
292 | | Storage Provider
293 | |--------------------------------------------------------------------------
294 | |
295 | | Specify the provider that is used to store tokens in the blacklist.
296 | |
297 | */
298 |
299 | 'storage' => Tymon\JWTAuth\Providers\Storage\Illuminate::class,
300 |
301 | ],
302 |
303 | ];
304 |
--------------------------------------------------------------------------------