Opinionated Laravel API starter kit for token-based authentication with strong defaults around API design, documentation, testing, and security.

Laravel News

Kit is an opinionated Laravel API starter kit by Steve McDougall that provides a structured foundation for building versioned JSON APIs. It includes token-based authentication via Laravel Sanctum with nine auth routes covering registration, login, email verification, and password reset. Key architectural decisions include versioned routes (no global /api prefix), invokable single-method controllers, FormRequest validation with DTO-style payload classes, and JSON:API response formatting. Security defaults include ULID primary keys, rate limiting, hardened response headers, audit logging, and anti-enumeration password reset responses. A Sunset middleware handles API deprecation with automatic header injection and 410 Gone enforcement after a configurable date. Documentation is generated via Scribe with OpenAPI spec output. The toolchain includes Pest, PHPStan, Pint, Rector, and GitHub Actions CI. Requires PHP 8.5+ and Laravel 12.

Kit: An Opinionated API Starter Kit for Laravel