Authentication/Authorization

These features are provided by Laravel's native Fortify and Sanctum packages. Permissions are handled by Spatie's Laravel Permissions package. Currently supported authentication features include email verification and password resets.

The Sanctum middleware provides a stateful SPA authentication and protection from CSRF and XSS. In addition, general flags (ACCESSIBILITY_READ_ONLY, ACCESSIBILITY_AUTHENTICATED_ONLY, ACCESSIBILITY_ALLOW_REGISTRATION) specify access to the software.