What configs need for laravel?

[prpanto]

Hello, thanks for this great project. I add FRONTEND_URL=http://localhost:3000, I add SESSION_DOMAIN=localhost, I add the the cors config supports_credentials' => true, (but I dont know what is mean this).
Need to add SANCTUM_STATEFUL_DOMAINS=localhost:3000 on env file and $middleware->statefulApi(); on middlewares?

By the way I use this kit: https://github.com/Grazulex/laravel-api-kit

Please add a guide for the laravel on docs.

[manchenkoff]

Hey @prpanto, I do not include Laravel docs to the module because they can get outdated very quickly 😄 Ideally, the configuration should be correct out of the box if you follow the official docs - Laravel Sanctum, or more specifically SPA Authentication. However, I cannot guarantee the same if you are using other kits or templates as I am not aware of their default config.

I add SESSION_DOMAIN=localhost

This is not needed for local development, moreover sometimes it breaks the stateful flow if your system translates it into hard "127.0.0.1" instead. You can drop it.

On the high-level, it should be:

• update CORS config to include your frontend domain (allowed_origins, support_credentials)
• update Sanctum config to enable stateful middleware for frontend domain
• use Sanctum middleware for necessary API routes

Your config highly depends on the environment as well, for instance Docker may use one configuration while PHP runner should use another one. Same applies to local vs production config due to TLD limitation, cookies, hosts, etc.

As an example, you can take a look at the config of breeze-api, which is a template with predefined config of Laravel w/ Sanctum I specifically use for testing nuxt-auth-sanctum, nuxt-laravel-echo and nuxt-sanctum-precognition modules.

If you experience any specific issue, please check troubleshooting section in the docs or create an issue.