laravel/sanctum

• [4.x] Update config/sanctum.php to follow skeleton laravel/pint format by @crynobone in #597

• [4.x] Supports Laravel 13 by @crynobone in #587

• Add optional last_used_at tracking configuration by @MElkmeshi in #583
• [4.x] Fix tests by @jackbayliss in #584
• [4.x] Fix failing test on Laravel > 11 by @jackbayliss in #585
• [4.x] Use property promotion by @jackbayliss in #586

• Allow nullable $passwordHash by @BnitoBzh in #582

• Allow null password hash by @patrickomeara in #581

• Support HMAC password hash format from Laravel 12.45.0+ by @ams-ryanolson in #578

• [4.x] Remove @return docblocks on constructors by @CasEbb in #575
• [4.x] PHP 8.5 Compatibility by @crynobone in #576

• [Refactor] Add indexes to personal_access_tokens by @keshav-k3 in #571

• [4.x] Factor token last_used_at update into separate method by @cosmastech in #567
• refactor: use text for name column by @reidsolon in #570

• Fixes inconsistency in Sanctum::currentApplicationUrlWithPort() and Sanctum::currentRequestHost() by @denjaland in https://github.com/laravel/sanctum/pull/565

• Update logo by @iamdavidhill in https://github.com/laravel/sanctum/pull/562
• Feature to treat same domain requests to be from frontend and make stateful by @denjaland in https://github.com/laravel/sanctum/pull/564

• Supports Laravel 12 by @crynobone in https://github.com/laravel/sanctum/pull/556

• [4.x] Add tokenCant() helper function to HasApiTokens by @chester-sykes in https://github.com/laravel/sanctum/pull/552

• Add leading slash to @template tag in HasTokens by @omnicolor in https://github.com/laravel/sanctum/pull/550

• [4.x] Supports PHP 8.4 by @crynobone in https://github.com/laravel/sanctum/pull/542
• [4.x] Remove generic requirement that token is an instance of a Model by @cosmastech in https://github.com/laravel/sanctum/pull/549

• [4.x] Add Generics to HasApiTokens by @cosmastech in https://github.com/laravel/sanctum/pull/544
• [4.x] Add generics by @cosmastech in https://github.com/laravel/sanctum/pull/545

• Fix: Cast Model Key to Integer for PostgreSQL Performance Improvement by @BakhadyrovF in https://github.com/laravel/sanctum/pull/524
• Revert "Fix: Cast Model Key to Integer for PostgreSQL Performance Improvement" by @driesvints in https://github.com/laravel/sanctum/pull/526
• Replace dead link in Security Policy by @Jubeki in https://github.com/laravel/sanctum/pull/528
• Update logo to support dark/light theme by @milewski in https://github.com/laravel/sanctum/pull/536

• Fix/unable to logout by @GigaGiorgadze in https://github.com/laravel/sanctum/pull/511

• [4.x] Make commands lazy by @timacdonald in https://github.com/laravel/sanctum/pull/502

• [4.x] Adds Laravel 11 support by @nunomaduro in https://github.com/laravel/sanctum/pull/480
• Matching method to contract for createToken() by @gammamatrix in https://github.com/laravel/sanctum/pull/498

• Updated CsrfCookieController to use named arguments by @OussamaMater in https://github.com/laravel/sanctum/pull/487
• Extract generate token method by @mowangjuanzi in https://github.com/laravel/sanctum/pull/488

• Fix typo in config by @cosmastech in https://github.com/laravel/sanctum/pull/476
• Accept null as a parameter for Sanctum[@getAccessTokenFromRequestUsing](https://github.com/getAccessTokenFromRequestUsing)() by @cosmastech in https://github.com/laravel/sanctum/pull/477

• Re-arrange middleware by @taylorotwell in https://github.com/laravel/sanctum/commit/d1f8bf7f2bdc39ba2a11f1d067b96d31d18246c8

• Use crc32b instead of crc32 by @marzvrover in https://github.com/laravel/sanctum/pull/468
• Ensure device has not been logged out by @crynobone in https://github.com/laravel/sanctum/pull/467
• Do not prefix by default by @taylorotwell https://github.com/laravel/sanctum/commit/95a0181900019e2d79acbd3e2ee7d57e3d0a086b

• Make tokens identifiable with prefix and checksum by @marzvrover in https://github.com/laravel/sanctum/pull/459
• Add deprecated annotation in MissingScopeException by @hungthai1401 in https://github.com/laravel/sanctum/pull/462

• Fix middleware by @taylorotwell in https://github.com/laravel/sanctum/commit/8ebda85d59d3c414863a7f4d816ef8302faad876

• Check for validate CSRF token by @taylorotwell in https://github.com/laravel/sanctum/commit/f5bae6156c760545f368438198327e2609ba7bf1

• Revert "check for validate csrf token middleware" by @driesvints in https://github.com/laravel/sanctum/commit/6281ce796d464592867f768eb890642aa1954bd0

• Check for validate csrf token middleware by @taylorotwell in https://github.com/laravel/sanctum/commit/bbcb052de3fe075a67446e8c5c8ffcb191a1fb24

Fixed

• Fix bearer token format validation by @krasucki in https://github.com/laravel/sanctum/pull/417

Added

• Laravel v10 Support by @driesvints in https://github.com/laravel/sanctum/pull/415

Changed

• Uses PHP Native Type Declarations 🐘 by @nunomaduro in https://github.com/laravel/sanctum/pull/405

Changed

• Update migration's primary identifier change by @suyar in https://github.com/laravel/sanctum/pull/386
• Prune expires_at tokens by @iruoy in https://github.com/laravel/sanctum/pull/385

Added

• Expiration dates for tokens by @bjhijmans in https://github.com/laravel/sanctum/pull/252

Changed

• Improves console output by @nunomaduro in https://github.com/laravel/sanctum/pull/382
• Shorter tokens by @taylorotwell in https://github.com/laravel/sanctum/commit/c46fc083ab52f2ddac97ee4510486f90fc94f220

Removed

• Drop old Laravel and PHP versions by @driesvints in https://github.com/laravel/sanctum/pull/378

Changed

• Added custom auth token header support by @CodesignDev in https://github.com/laravel/sanctum/pull/354

Added

• Add sanctum:prune-expired command for removing expired tokens. by @yuraplohov in https://github.com/laravel/sanctum/pull/348

Fixed

• Add exit codes to command by @driesvints in https://github.com/laravel/sanctum/pull/351

Changed

• Use config function by @taylorotwell in commit

Changed

• Add helper for current app url with port (5702317)

Changed

• Laravel 9 support (#329)

Added

• Add an event on successful token validation (#327, b656bc1)

Changed

• Add guard to config (f811d5c)

Changed

• Rename CheckScopes and CheckForAnyScope to CheckAbilities and CheckForAnyAbility (#312)

Added

• Add CheckScopes and CheckForAnyScope Middleware (#310)

Fixed

• Revert "fix: replace hardcoded "web" guard by config('sanctum.guard')" (#309)

Fixed

• Replace hardcoded "web" guard by config('sanctum.guard') (#307)

Fixed

• Ignore updating last_used_at for deciding the DB connection host (#283, 2c8b9a1)
• Fix resolving wrong app instance on Octane (#285, #286)

Changed

• Only parse APP_URL for default stateful domains when it's set (#279)

Added

• Sanctum::$accessTokenAuthenticationCallback callback for more granular control over access token validation (#275, 9c07921, #276)

Added

• Add HasApiTokens contract to complement trait (#270)

Changed

• Use app helper (60f2809)

Changed

• Environment APP_URL added into the default sanctum.stateful configuration (#264)

Fixed

• Changed Primary Key will not be used in created token's plainTextToken (#262)

Fixed

• Avoid running string functions when domain is null (#258)

Added

• Add multiple guard support for SPA auth (#246, f5695ae)

Fixed

• Return json response when the request expects a json (#247)

Fixed

• Fix user provider in sanctum guard (#225)

Changed

• Add default nextjs address to stateful (e86d3e0)

Added

• PHP 8 Support (#213)

Added

• Adds origin header fallback (#204)

Changed

• Shorten tokens (#186)