LaravelVueJs
Turn on CORS credentials for a separate Vue app
A separate Vue origin needs supports_credentials and an explicit origin. A same-origin Inertia app needs neither.
LaravelVueJs
Limit a Sanctum token with abilities
createToken can take an ability list. The ability middleware belongs on the API route, not on an Inertia page.
LaravelVueJs
Issue a Sanctum token without breaking the SPA
A first-party Vue SPA uses the session cookie. createToken is for a mobile client or another product.
LaravelVueJs
Protect an Inertia page with auth middleware
auth on the Laravel route is what sends a guest to login. A v-if on the Vue page does not.
LaravelVueJs
Rate limit Fortify login attempts
Fortify's login limiter is five attempts a minute. The Vue page shows the message on the username field.
LaravelVueJs
Change the Fortify login field
Fortify's username config key is the input name. The Vue login form has to post that same name.
LaravelVueJs
Confirm a password before a sensitive Vue action
password.confirm sends the user to Fortify's confirm screen. The Vue form posts the current password once.
LaravelVueJs
Reset a password with Fortify and Vue
Fortify already exposes the forgot-password and reset-password URLs. The Vue form posts those fields and no others.
LaravelVueJs
Verify email with Fortify and Vue
The Vue starter kit already verifies email. The user model must implement MustVerifyEmail, and the resend form posts to Fortify.
LaravelVueJs
Set SESSION_DOMAIN for a Vue app
Leave SESSION_DOMAIN empty on one host. Set the parent domain only when Vue and Laravel are real subdomains.
LaravelVueJs
Fix a 419 after you deploy
A 419 after deploy is a CSRF cookie that the browser did not send. The app key, the domain, and HTTPS are the usual causes.
LaravelVueJs
Add a query string to a Wayfinder URL
Pass query on the generated Wayfinder function. Do not glue a question mark onto the URL by hand.
Newsletter
Get the best of Laravel & Vue, once a month.
One short email with new guides, release notes worth reading and hand-picked community links. No spam, unsubscribe any time.