Overview
The authentication routes handle user registration, login, logout, email verification, password reset, and social authentication via OAuth providers.Guest Routes
These routes are accessible only to unauthenticated users (middleware:guest).
Registration
Registration Form
guestController:
RegisteredUserController@createRoute Name:
register
Displays the user registration form.
Process Registration
guestController:
RegisteredUserController@store
Processes the registration form and creates a new user account.
Login
Login Form
guestController:
AuthenticatedSessionController@createRoute Name:
login
Displays the login form.
Process Login
guestController:
AuthenticatedSessionController@store
Authenticates the user and creates a new session.
Password Reset
Forgot Password Form
guestController:
PasswordResetLinkController@createRoute Name:
password.request
Displays the forgot password form.
Send Reset Link
guestController:
PasswordResetLinkController@storeRoute Name:
password.email
Sends a password reset link to the user’s email.
Reset Password Form
guestController:
NewPasswordController@createRoute Name:
password.resetParameters:
token(string): Password reset token from email
Process Password Reset
guestController:
NewPasswordController@storeRoute Name:
password.store
Resets the user’s password using the provided token.
Social Authentication
OAuth Redirect
guestController:
SocialiteSessionController@redirectToProviderRoute Name:
socialite.redirectParameters:
driver(string): OAuth provider (githuborgoogle)
OAuth Callback
guestController:
SocialiteSessionController@handleProviderCallbackRoute Name:
socialite.callbackParameters:
driver(string): OAuth provider
Authenticated Routes
These routes require authentication (middleware:auth).
Email Verification
Email Verification Prompt
authController:
EmailVerificationPromptControllerRoute Name:
verification.notice
Displays a prompt asking the user to verify their email address.
Verify Email
auth, signed, throttle:6,1Controller:
VerifyEmailControllerRoute Name:
verification.verifyParameters:
id(integer): User IDhash(string): Verification hash
Resend Verification Email
auth, throttle:6,1Controller:
EmailVerificationNotificationController@storeRoute Name:
verification.send
Resends the email verification notification. Rate limited to 6 attempts per minute.
Password Management
Confirm Password Form
authController:
ConfirmablePasswordController@showRoute Name:
password.confirm
Displays the password confirmation form for sensitive operations.
Confirm Password
authController:
ConfirmablePasswordController@store
Validates the user’s current password.
Update Password
authController:
PasswordController@updateRoute Name:
password.update
Updates the authenticated user’s password.
Logout
Logout
authController:
AuthenticatedSessionController@destroyRoute Name:
logout
Logs out the authenticated user and destroys their session.
Middleware Reference
- guest: Only accessible to unauthenticated users
- auth: Requires authentication
- signed: Validates signed URLs
- throttle:6,1: Rate limits to 6 requests per 1 minute