Skip to content

Tags: laravel/sanctum

Tags

v4.3.2

Toggle v4.3.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[4.x] Update `config/sanctum.php` to follow skeleton pint format (#597)

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>

v4.3.1

Toggle v4.3.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[4.x] Supports Laravel 13 (#587)

* [4.x] Supports Laravel 13

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>

* refactor

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>

* Apply fixes from StyleCI

* wip

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>

---------

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>
Co-authored-by: StyleCI Bot <bot@styleci.io>

v4.3.0

Toggle v4.3.0's commit message

Verified

This commit was signed with the committer’s verified signature.
StyleCIBot StyleCI Bot
Apply fixes from StyleCI

v4.2.4

Toggle v4.2.4's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Allow nullable $passwordHash (#582)

v4.2.3

Toggle v4.2.3's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Allow null password hash (#581)

The users password may be null at this point

v4.2.2

Toggle v4.2.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Support HMAC password hash format from Laravel 12.45.0+ (#578)

Laravel Framework v12.45.0 (PR laravel/framework#58107) changed how
password hashes are stored in sessions - they're now stored as HMACs
instead of raw hashes for improved security.

This updates Sanctum's AuthenticateSession middleware to:
1. Use hashPasswordForCookie() when storing the password hash (if available)
2. Add validatePasswordHash() that tries HMAC format first, falls back to
   raw hash comparison for backward compatibility

This ensures compatibility when both $middleware->authenticateSessions()
and Sanctum stateful auth are enabled together.

Fixes #577

v4.2.1

Toggle v4.2.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[4.x] PHP 8.5 Compatibility (#576)

Signed-off-by: Mior Muhammad Zaki <crynobone@gmail.com>

v4.2.0

Toggle v4.2.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[Refactor] Add indexes to personal_access_tokens (#571)

* Add Indexing to p_a_t

* Update 2019_12_14_000001_create_personal_access_tokens_table.php

---------

Co-authored-by: Taylor Otwell <taylor@laravel.com>

v4.1.2

Toggle v4.1.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
refactor: use text for token column (#570)

Co-authored-by: Ray Anthony <=>

v4.1.1

Toggle v4.1.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixes inconsistency in Sanctum::currentApplicationUrlWithPort() and S…

…anctum::currentRequestHost() (#565)

* Fix on #564, making sure both Sanctum::currentApplicationUrlWithPort() and Sanctum::currentRequestHost() work in a similar way by prepending the url or placeholder with a comma.

* Fixing styling issues.