Authentication

Authentication Methods

Craftable Pro supports various authentication methods to facilitate secure access for users. Each method offers distinct advantages in terms of security and convenience.

Authentication via email/password

• With Self-Registration - Users can create new accounts through the registration form by providing necessary details such as email, and password. The domains of emails with which users can self-register can be whitelisted in the config.

• Without Self-Registration - Only users created manually within Craftable Pro can access the system via the login form.

• Disabled - Traditional email/password login can be entirely disabled, which can come in handy in cases when you only want users to use social logins to authenticate.

To learn more about how to set up traditional login within Craftable Pro, head to the Traditional Login section of this page.

Authentication via social providers

• With Self-Registration - Users can create new accounts in your app simply by authenticating via a social login provider. The domains of emails with which users can self-register can be whitelisted in the config.

• Without Self-Registration - Only users created manually within Craftable Pro can access the system via social login providers.

• Disabled - Social logins can be entirely disabled, if you only want to keep the traditional email/password login form for authentication.

To learn more about how to set up social logins within Craftable Pro, jump to the Social Login section of this page.

Traditional Login

Self-registration

Self-registration empowers users to autonomously create accounts, granting them access to the system while streamlining the onboarding process.

You can enable self-registration by editing the Craftable PRO config and setting enabled in self_registration to true.

You can also set the default role for newly registered users. This is discussed more in the section Roles & Permissions.

To whitelist the email domains allowed for newly registered users, edit the allowed_domains setting. To allow any domain, set it to ['*'].

'self_registration' => [
    // define if users can self register into craftable pro interface
    'enabled' => true,
 
    // and if enabled, then which role(s) they should have assigned by default. Use role names here.
    // It can be a string for one role or an array for multiple roles.
    'default_role' => 'Guest',
    'allowed_domains' => [] // use * for allowing any domain
],

Social Login

This feature empowers you to seamlessly integrate social login functionality into your application, enhancing user experience and engagement. Craftable PRO supports various popular social platforms, including Facebook, GitHub, Twitter, Apple, Google, and Microsoft, allowing your users to sign in using their preferred social accounts effortlessly. The functionality is powered by the Laravel Socialite (opens in a new tab) package and its extensive range of providers.

Getting Started

To enable social login in your application, follow these simple steps:

'social_login' => [
    'allowed_services' => [
        'microsoft' => false,
        'github' => true,
        'google' => true,
        'twitter' => false,
        'facebook' => false,
        'apple' => false,
    ],
    'self_registration' => [
        // define if users can self register into craftable pro interface
        'enabled' => true,
        // and if enabled, then which role(s) they should have assigned by default. Use role names here.
        // It can be a string for one role or an array for multiple roles.
        'default_role' => 'Administrator',
        'allowed_domains' => ['craftable.pro'], // use * for allowing any domain
    ]
]

protected $listen = [
    \SocialiteProviders\Manager\SocialiteWasCalled::class => [
        \SocialiteProviders\Apple\MicrosoftExtendSocialite::class,
        \SocialiteProviders\Apple\GitHubExtendSocialite::class,
        \SocialiteProviders\Apple\TwitterExtendSocialite::class,
        \SocialiteProviders\Apple\FacebookExtendSocialite::class,
        \SocialiteProviders\Apple\GoogleExtendSocialite::class,
        \SocialiteProviders\Apple\AppleExtendSocialite::class,
    ]
];

MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=
MICROSOFT_REDIRECT_URI="/admin/login/microsoft/callback"
 
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_REDIRECT_URI="/admin/login/github/callback"
 
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URL="/admin/login/google/callback"
 
TWITTER_CLIENT_ID=
TWITTER_CLIENT_SECRET=
TWITTER_REDIRECT_URI="/admin/login/twitter/callback"
 
FACEBOOK_CLIENT_ID=
FACEBOOK_CLIENT_SECRET=
FACEBOOK_REDIRECT_URI="/admin/login/facebook/callback"
 
APPLE_CLIENT_ID=
APPLE_CLIENT_SECRET=
APPLE_REDIRECT_URI="/admin/login/apple/callback"

Other providers

To use another existing provider, check out the Laravel Socialite (opens in a new tab) or Laravel Socialite Providers (opens in a new tab) documentation.

To create a new custom provider, follow the steps outlined here (opens in a new tab). To enable your new provider in Craftable Pro, don't forget to add it to the config:

   'social_login' => [
        'allowed_services' => [
            'myNewProvider' => true
            ...
        ],
        ...
    ]

as well as to implement a login button for it on the login page.