Weave Code
Anzu authorization services
Frequently asked questions about Auth Bundle
- What is anzusystems/auth-bundle used for?
- It is a Symfony bundle that provides authentication and authorization features for AnzuSystems projects, including JSON credentials login, JWT access tokens, refresh-token storage, redirect handling, and optional personal access tokens. It is configured through anzu_systems_auth.yaml and Symfony SecurityBundle rather than Laravel's native auth system. Laravel teams should treat it as a Symfony component, not a drop-in Laravel package.
- Does anzusystems/auth-bundle work with Laravel?
- Not natively. The bundle is Symfony-focused and lacks a Laravel service provider, facade, or guard implementation, so Laravel integration requires custom adapters around Symfony's UserProvider and authenticator classes. It is only reasonable for hybrid Laravel/Symfony stacks already using Symfony security components. For a Laravel-only app, prefer Laravel-native auth packages.
- How do I install anzusystems/auth-bundle with Composer?
- Run composer require anzusystems/auth-bundle --no-scripts from your project. Then create config/anzu_systems_auth.yaml and wire the bundle into Symfony's config/security.yaml and routing. In Laravel, there is no automatic package discovery or publish step, so you must manually bridge configuration and services.
- How do I configure JWT authentication in anzusystems/auth-bundle?
- Set the jwt section in config/anzu_systems_auth.yaml with audience, algorithm (ES256 by default or RS256), and base64-encoded public_cert and private_cert environment variables. In security.yaml, define a stateless auth firewall with json_login, the bundle's success and failure handlers, and a logout path. Import the bundle's JsonCredentialsAuthController route under /api/auth/.
- Which Laravel versions are supported by anzusystems/auth-bundle?
- No Laravel version support matrix is published because this is a Symfony bundle. Its v5.0.0 release targets Symfony 8-era components and PHP 8.1+, so Composer constraints may conflict with Laravel versions that pin older Symfony components. Test dependency resolution in a branch before assuming compatibility with Laravel 10 or 11.
- How do personal access tokens work in anzusystems/auth-bundle?
- Personal access tokens are opt-in and disabled by default, so existing projects need no schema changes after upgrading. When enabled, the bundle issues an sha256-hashed bearer token bound to a user, with expiration, revocation, cached authentication, expiry notifications, and management API endpoints. Enable it by subclassing the mapped superclass and pointing the bundle config to your entity.
- Can I use anzusystems/auth-bundle with Laravel Sanctum or Passport?
- There is no built-in integration. Sanctum and Passport already own Laravel's token and session authentication, while this bundle expects Symfony SecurityBundle authenticators and handlers. Running both would mean maintaining a custom guard bridge and reconciling duplicate token, session, and CSRF behavior. Choose one auth layer unless you have a specific hybrid requirement.
- What are the production requirements for anzusystems/auth-bundle?
- Use secure cookies in production, provide valid JWT certificates, and configure Redis or another shared store for refresh-token storage when authorization is enabled. Ensure HTTPS, align CSRF and session handling with your framework, and verify redirect URL patterns for auth_redirect_query_url_allowed_pattern. Because it is Symfony-based, Laravel deployments need extra monitoring around middleware and session conflicts.
- How should I test anzusystems/auth-bundle in a Laravel application?
- Write integration tests around the Symfony-to-Laravel bridge, covering login success and failure, logout, JWT refresh, redirect handling, and personal access token revocation. Use Laravel's HTTP testing helpers for endpoints, but assert the underlying Symfony authenticator and provider behavior separately. Include negative tests for CSRF, expired tokens, and middleware ordering, since those are the most likely failure points.
- What are the alternatives to anzusystems/auth-bundle for Laravel?
- For Laravel-native authentication, evaluate laravel/sanctum for API tokens, laravel/passport for OAuth2, tymon/jwt-auth for JWT, and spatie/laravel-permission for roles and permissions. laravel/breeze or laravel/ui can scaffold session auth. These alternatives avoid the Symfony bridge work and have first-party Laravel documentation and community support.
Weaver
How can I help you explore Laravel packages today?