mcpField
L
laravel-policies-and-authorization

laravel-policies-and-authorization

github.com/noartemSecurity1378 installsUpdated 2w ago
Repository

About laravel-policies-and-authorization

A Laravel authorization skill for developers, covering Policies for model actions and Gates for cross-cutting checks, with route protection and testing guidance.

Key features

  1. 01Use Policies for model actions
  2. 02Apply Gates to cross-cutting checks
  3. 03Protect routes with can middleware
  4. 04Test denied authorization

Use cases

  1. 01Generate and configure model Policies
  2. 02Protect resource controller routes
  3. 03Check responses to unauthorized access

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/noartem/skills --skill laravel-policies-and-authorization

After installing, type/laravel-policies-and-authorizationin Claude Code to confirm it loaded.

Details

From the project README

Policies and Authorization

Use Policies for per-model actions; use Gates for cross-cutting checks.

Commands

# Generate a policy
sail artisan make:policy PostPolicy --model=Post   # or: php artisan make:policy PostPolicy --model=Post

# Apply in routes (resource controllers)
Route::resource('posts', PostController::class);
// In controller constructor
$this->authorizeResource(Post::class, 'post');

# One-off checks
$this->authorize('update', $post);           // in controller
Gate::allows('manage-billing', $user);       // ad-hoc gate

Patterns

  • Use resource policy methods: viewAny, view, create, update, delete, restore, forceDelete
  • Prefer policy methods over inline checks; keeps controllers clean
  • Register policies in AuthServiceProvider
  • Use can middleware for quick route protection: ->middleware('can:update,post')
  • In tests, assert actingAs($user)->get(...)->assertForbidden() for denied cases

Comments

Markdown supported