Tags: laravel/sanctum
Tags
[4.x] Supports Laravel 13 (#587) * [4.x] Supports Laravel 13 Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com> * refactor Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com> * Apply fixes from StyleCI * wip Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com> --------- Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com> Co-authored-by: StyleCI Bot <bot@styleci.io>
Support HMAC password hash format from Laravel 12.45.0+ (#578) Laravel Framework v12.45.0 (PR laravel/framework#58107) changed how password hashes are stored in sessions - they're now stored as HMACs instead of raw hashes for improved security. This updates Sanctum's AuthenticateSession middleware to: 1. Use hashPasswordForCookie() when storing the password hash (if available) 2. Add validatePasswordHash() that tries HMAC format first, falls back to raw hash comparison for backward compatibility This ensures compatibility when both $middleware->authenticateSessions() and Sanctum stateful auth are enabled together. Fixes #577
Fixes inconsistency in Sanctum::currentApplicationUrlWithPort() and S… …anctum::currentRequestHost() (#565) * Fix on #564, making sure both Sanctum::currentApplicationUrlWithPort() and Sanctum::currentRequestHost() work in a similar way by prepending the url or placeholder with a comma. * Fixing styling issues.
PreviousNext