Filament Passwordless Login Laravel Package

Product Decisions This Supports

• Passwordless Authentication Roadmap: Accelerates implementation of magic-link login for B2B/B2C SaaS products, reducing friction in user onboarding and reducing password-related support tickets.
• Build vs. Buy: Eliminates need to build custom magic-link auth from scratch, saving 2-4 weeks of dev time while leveraging Filament’s ecosystem.
• Security & Compliance: Supports GDPR/CCPA compliance by avoiding password storage (no hashing, no breaches). Aligns with zero-trust principles.
• Multi-Tenant SaaS: Enables tenant-specific login flows (e.g., white-label magic links per tenant) via Filament’s panel system.
• Developer Experience: Reduces cognitive load for backend teams by providing a single, configurable solution for both admin and user-facing auth.
• A/B Testing: Allows testing magic-link vs. traditional login flows without rewriting auth logic (toggle via loginPage()).
• Localization: Critical for global products—supports 8 languages out-of-the-box with easy extension for additional locales.
• Admin Tooling: Embeds token management directly in Filament’s UI, reducing need for separate admin panels for auth oversight.

When to Consider This Package

Adopt if:

• Your product uses Filament 4/5 for admin panels (or plans to migrate).
• You prioritize passwordless auth for users (e.g., developers, internal tools, or low-friction consumer flows).
• You need token management (generate/revoke magic links) accessible via Filament’s UI.
• Your team lacks bandwidth to build a custom magic-link system from scratch.
• You require multi-panel support (e.g., separate admin/app portals with distinct auth flows).
• You want to A/B test magic links vs. traditional login without major refactoring.

Look elsewhere if:

• You’re not using Filament (this is a Filament-specific plugin).
• You need SMS/OTP fallback (this is magic-link only; consider spykapps/passwordless-login directly for hybrid flows).
• Your auth stack is highly customized (e.g., custom user models, non-standard email providers).
• You require enterprise-grade audit logging (this package focuses on core functionality; extend with Laravel Observers).
• You’re on Laravel <10 or PHP <8.1 (minimum requirements).
• You need social login (e.g., OAuth) alongside magic links (combine with spatie/laravel-socialite).
• Your use case demands bulk token generation (e.g., for migrations; may need custom scripts).

How to Pitch It (Stakeholders)

For Executives: "This package lets us ship passwordless login in days—not weeks—while cutting support costs from password resets. It’s battle-tested for Filament, so our devs can focus on core features. We get built-in token management, multi-language support, and the flexibility to A/B test login flows without rewriting auth. For global products, this reduces friction for non-tech-savvy users and aligns with security best practices like zero-trust. The MIT license means no vendor lock-in, and the Filament ecosystem ensures long-term maintainability."

For Engineering: *"This is a drop-in replacement for Filament’s default login that adds magic-link auth with zero custom Blade templates. Key benefits:

• Zero auth logic: Built on spykapps/passwordless-login, so we inherit security and reliability.
• Filament-native: Integrates with panels, widgets, and actions—no UI work needed.
• Config-driven: Toggle features (e.g., disable tokens, customize emails) via fluent API or config files.
• Multi-panel ready: Each Filament panel can have its own redirect URLs and settings.
• Extensible: Override emails, notifications, or the login page class when needed. Tradeoff: It’s magic-link only (no OTP/SMS), but we can layer that later if needed. Upgrade path is clear if requirements change."*

For Design/Product: *"This gives us a seamless, modern login flow without compromising security. Highlights:

• No passwords: Reduces friction for users who forget credentials.
• White-labelable: Custom icons, colors, and copy via config/lang files.
• Admin visibility: Token management lives in Filament, so we can track usage (e.g., ‘how many users log in via magic links?’).
• Localization-ready: Supports 8 languages out-of-the-box; easy to add more. Use case: Ideal for internal tools, developer portals, or B2C flows where security is critical but UX must be frictionless."*