Implement session based authentication with Sanctum

app/GraphQL/Mutations/Login.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\GraphQL\Mutations;
+
+use App\Models\User;
+use GraphQL\Error\Error;
+use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Auth;
+
+final class Login
+{
+    /**
+     * @param  null  $_
+     * @param  array{email: string, password: string}  $args
+     */
+    public function __invoke($_, array $args): User
+    {
+        $guardConfig = config('sanctum.guard');
+        assert(is_array($guardConfig));
+
+        $guardName = Arr::first($guardConfig);
+        assert(is_string($guardName));
+
+        $guard = Auth::guard($guardName);
+
+        if( ! $guard->attempt($args)) {
+            throw new Error('Invalid credentials.');
+        }
+
+        $user = $guard->user();
+        assert($user instanceof User, 'must receive User after successful login');
+
+        return $user;
+    }
+}

app/GraphQL/Mutations/Logout.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\GraphQL\Mutations;
+
+use App\Models\User;
+use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Auth;
+
+final class Logout
+{
+    public function __invoke(): ?User
+    {
+        $guardConfig = config('sanctum.guard');
+        assert(is_array($guardConfig));
+
+        $guardName = Arr::first($guardConfig);
+        assert(is_string($guardName));
+
+        $guard = Auth::guard($guardName);
+
+        $user = $guard->user();
+
+        $guard->logout();
+
+        return $user;
+    }
+}

app/Http/Kernel.php

@@ -25,6 +25,12 @@ final class Kernel extends HttpKernel
      * @var array<string, array<string|class-string>>
      */
     protected $middlewareGroups = [
+        'web' => [
+            \Illuminate\Cookie\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
+            \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class,
+        ],
         'api' => [
             'throttle:60,1',
             \Illuminate\Routing\Middleware\SubstituteBindings::class,

composer.json

@@ -13,6 +13,7 @@
         "php": "^8.0.2",
         "guzzlehttp/guzzle": "^7.2",
         "laravel/framework": "^9.11",
+        "laravel/sanctum": "^2.15",
         "laravel/tinker": "^2.7",
         "mll-lab/laravel-graphql-playground": "^2",
         "nuwave/lighthouse": "^5"

config/app.php

@@ -157,6 +157,7 @@
         Illuminate\Queue\QueueServiceProvider::class,
         Illuminate\Redis\RedisServiceProvider::class,
         Illuminate\Auth\Passwords\PasswordResetServiceProvider::class,
+        Illuminate\Session\SessionServiceProvider::class,
         Illuminate\Translation\TranslationServiceProvider::class,
         Illuminate\Validation\ValidationServiceProvider::class,
         Illuminate\View\ViewServiceProvider::class,
@@ -214,6 +215,7 @@
         'Response' => Illuminate\Support\Facades\Response::class,
         'Route' => Illuminate\Support\Facades\Route::class,
         'Schema' => Illuminate\Support\Facades\Schema::class,
+        'Session' => Illuminate\Support\Facades\Session::class,
         'Storage' => Illuminate\Support\Facades\Storage::class,
         'Str' => Illuminate\Support\Str::class,
         'URL' => Illuminate\Support\Facades\URL::class,

config/auth.php

@@ -36,6 +36,11 @@
     */
 
     'guards' => [
+        'web' => [
+            'driver' => 'session',
+            'provider' => 'users',
+        ],
+
         'api' => [
             'driver' => 'token',
             'provider' => 'users',

config/graphql-playground.php

@@ -0,0 +1,63 @@
+<?php
+
+declare(strict_types=1);
+
+return [
+    /*
+    |--------------------------------------------------------------------------
+    | Route configuration
+    |--------------------------------------------------------------------------
+    |
+    | Set the URI at which the GraphQL Playground can be viewed
+    | and any additional configuration for the route.
+    |
+    */
+
+    'route' => [
+        'uri' => '/graphql-playground',
+        'name' => 'graphql-playground',
+        'middleware' => ['web']
+        // 'prefix' => '',
+        // 'domain' => 'graphql.' . env('APP_DOMAIN', 'localhost'),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default GraphQL endpoint
+    |--------------------------------------------------------------------------
+    |
+    | The default endpoint that the Playground UI is set to.
+    | It assumes you are running GraphQL on the same domain
+    | as GraphQL Playground, but can be set to any URL.
+    |
+    */
+
+    'endpoint' => '/graphql',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Subscription endpoint
+    |--------------------------------------------------------------------------
+    |
+    | The default subscription endpoint Playground UI uses to connect to.
+    | Tries to connect to the `endpoint` value if `null` as ws://{{endpoint}}
+    |
+    | Example: `ws://your-endpoint` or `wss://your-endpoint`
+    |
+    */
+
+    'subscriptionEndpoint' => env('GRAPHQL_PLAYGROUND_SUBSCRIPTION_ENDPOINT', null),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Control Playground availability
+    |--------------------------------------------------------------------------
+    |
+    | Control if the playground is accessible at all.
+    | This allows you to disable it in certain environments,
+    | for example you might not want it active in production.
+    |
+    */
+
+    'enabled' => env('GRAPHQL_PLAYGROUND_ENABLED', true),
+];