# Laravel:api Authentication

> Strengthen Laravel validation/auth/authorization boundaries with explicit failure-safe implementation patterns. Use for api authentication tasks.

- Skill: `btafoya/laravel-api-authentication` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add btafoya/laravel-api-authentication`
- Raw SKILL.md: https://api.skillmd.com/api/skills/btafoya/laravel-api-authentication/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: btafoya (https://skillmd.com/u/btafoya)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/btafoya/laravel-api-authentication

---


# Api Authentication (Laravel)

## Use when
- Hardening authentication/authorization/validation paths.
- Standardizing access control and error semantics.

## Default workflow
1. Map actors, protected resources, and allowed actions.
2. Implement validation + authorization at explicit boundaries.
2. Apply throttling and consistent failure responses.
2. Test authorized/unauthorized/invalid scenarios.

## Guardrails
- Do not leak sensitive existence or permission details.
- Never rely on UI-only access checks.
- Keep auth and validation logic centralized.

## Progressive disclosure
- Start with this file for execution posture and constraints.
- Load references only for deep implementation detail or edge cases.

## Output contract
- Security boundary changes and rationale.
- Endpoints/middleware/policies updated.
- Negative-path test evidence.

## References
- `reference.md`
- `docs/complexity-tiers.md`