Auth

Overview:

Auth provides lightweight authentication helpers with session and bearer token support. It is designed to be extended through resolvers rather than imposing a user model.

Use Auth to centralize login state and token-based identity resolution so route guards and business code read the current user through one consistent entry point.

Public API:

• Auth::boot()
• Auth::resolver(callable $resolver)
• Auth::tokenResolver(callable $resolver)
• Auth::user()
• Auth::check()
• Auth::id()
• Auth::source()
• Auth::identity()
• Auth::login($identity)
• Auth::logout()

Resolvers:

• resolver($identity, $source, $context)
• tokenResolver($token, $payloadOrNull)

Example:

Auth::resolver(function ($identity, $source, $context) {
  if ($source === 'session') return User::find($identity);
  if ($source === 'bearer' && isset($identity->sub)) return User::find($identity->sub);
  return null;
});

Auth::boot();

Route::get('/profile', function () {
  return Auth::user();
})->auth();

Bearer/JWT:

• If core.auth.jwt.secret is set, Token::decode verifies signatures.
• core.auth.jwt.require_exp can enforce expiration checks.