Repository navigation
Extract auth concerns from Model into an Authable base class #332
Description
Problem
Auth-specific behavior currently sits on the generic Model class (e.g. getAuthKeyName()). Model should stay generic. Only models that authenticate need auth methods and attributes.
The Auth facade also documents User, which is not a framework type. Auth already resolves the model configured per actor in config/auth.php, so locking the type to User is wrong.
Proposal
- Add an
Authablebase class that extendsModeland owns everything auth needs. - Remove auth methods from
Model(starting withgetAuthKeyName()). - Put auth-related helpers on
Authableinstead of reading raw attributes through Auth, including things like:- auth key name (
getAuthKeyName()) - auth identifier / primary key
- password hash access
- remember token get/set
- two-factor secret / recovery codes access
- persist (
save()) where Auth needs it
- auth key name (
- Type Auth (
Authfacade +Authenticate) againstAuthable, notUseror an untyped$user. - Application auth models (
User, laterAdmin, etc.) extendAuthableinstead ofModeldirectly.
Multi-actor auth via config/auth.php stays the same. Each actor still points at its own model. Those models just extend Authable.
Example
// before
class User extends Model { ... }
// after
class User extends Authable { ... }
Activity
techmahedy commentedon Sep 24, 2026
@xentixar I’ll check it, but did you also review
runtime/config/auth.php? We can support multi-actor authentication by configuring the actors in this file.I agree this is still an issue with the facade annotation:
xentixar commentedon Sep 24, 2026
@techmahedy Multi-actor via config/auth.php is fine, this isn't about changing that. Just the facade/login typing: there's no User in the framework, so an Authenticatable contract fits better for whatever model the actor uses.
techmahedy commentedon Sep 24, 2026
Ok i am going to use newly created Authable contract
[-]Type Auth facade users as an Authenticatable contract[/-][+]Extract auth concerns from Model into an Authable base class[/+]