User Bundle Laravel Package

Product Decisions This Supports

• Accelerated MVP for Authentication: Reduces development time for core user flows (registration, login, OAuth, password recovery) by providing pre-built, production-ready components. Enables teams to focus on domain-specific features rather than reinventing authentication logic.
• Multi-Channel Strategy: Supports both web (Symfony templates) and API-first (JWT, API Platform) access patterns, aligning with headless architectures or mobile/SPA integrations. Critical for omnichannel products (e.g., SaaS platforms, marketplaces).
• Compliance & Security Roadmap: Built-in OAuth (Google/GitHub/Facebook) and password reset flows simplify adherence to GDPR (data protection) and SOX (audit trails via command-line user creation). Reduces legal/engineering friction for regulated industries.
• Build vs. Buy: Validates a buy decision for teams lacking Symfony expertise or needing rapid scaling of authentication infrastructure. Avoids technical debt from custom user management systems.
• Extensibility for Future Features: Modular design (e.g., extensible User entity, theming support) enables incremental adoption of MFA (planned) or custom user attributes without forking the package.

When to Consider This Package

• Adopt if:
  • Your Laravel/Symfony project requires authentication (registration, login, OAuth) and API access (JWT, API Platform) as core features.
  • You prioritize developer velocity over customization—e.g., shipping an MVP in <4 weeks.
  • Your team uses Symfony 4.4+ or 5.x and needs compatibility with API Platform 2.x.
  • You require OAuth integration (Google/GitHub/Facebook) with minimal boilerplate.
  • Your product targets B2B or regulated markets where audit trails (CLI user creation) or compliance (password resets) are critical.
• Look elsewhere if:
  • You’re using Laravel outside Symfony (this is a Symfony bundle; consider laravel/breeze or laravel/sanctum).
  • You need advanced MFA (currently planned but not released; evaluate paragonie/multi-auth as an alternative).
  • Your API uses GraphQL (this package is REST/API Platform-focused; pair with webonyx/graphql-php if needed).
  • You require highly customized user models (e.g., polyfillable roles, complex relationships) and prefer a blank slate over extension points.
  • Your project uses Symfony <4.4 (last tested version is 4.4+).

How to Pitch It (Stakeholders)

For Executives: *"This package cuts authentication development time from 6–8 weeks to 2–3 weeks by providing battle-tested, scalable user management for both web and API channels. Key benefits:

• Faster time-to-market: Pre-built registration, login, OAuth (Google/GitHub), and password recovery flows.
• API-first ready: Built for JWT and API Platform, enabling seamless integration with mobile apps or SPAs.
• Compliance-ready: CLI user creation and password resets simplify audit trails for regulated industries.
• Future-proof: Roadmap includes MFA and extensible user models, reducing refactoring risk. For a SaaS platform or marketplace, this lets us focus on core features while ensuring secure, scalable authentication."

For Engineering Leaders: *"The ConnectHolland User Bundle is a Symfony-centric alternative to Laravel’s ecosystem for teams already using Symfony 4/5. It’s a drop-in solution for:

• Authentication: Registration, login, OAuth (via HWI Bundle), and password recovery—all with email verification.
• API Access: JWT support via Lexik’s bundle, with proper HTTP response handling (e.g., 200 for POST operations like registration).
• Developer Experience: CLI for user creation (./bin/console connectholland:user:create), theming support, and extensible User entity. Tradeoffs:
• Not Laravel-native: Requires Symfony (but works alongside Laravel via bridges like spatie/laravel-symfony).
• OAuth depends on HWI Bundle: Add ~10 mins of config for Google/GitHub.
• MFA not yet released: Track the roadmap or use a separate package. Recommendation: Adopt for Symfony-based APIs or web apps needing rapid auth scaling. Pair with API Platform for headless architectures."*

For Developers: *"If you’re tired of writing the same auth logic every project, this bundle does 90% of the heavy lifting for you:

• Registration/Login: Pre-built forms with email verification.
• OAuth: Just add env vars for Google/GitHub (e.g., USERBUNDLE_OAUTH_GOOGLE_ID).
• API: JWT support with Lexik’s bundle—no manual token generation.
• CLI: Create users with roles via ./bin/console connectholland:user:create. Gotchas:
• Symfony-only: Not for Laravel (use laravel/breeze instead).
• API Platform 2.x: The 200 vs. 201 fix is specific to this version.
• Extending the User: Clone the User entity and map it in Doctrine. Try it: composer require connectholland/user-bundle + follow the README."*