Secure RBAC API
Custom Role-Based Access Control system built from scratch with Laravel Passport, middleware, and Docker.
Overview
Most applications eventually need more than “admin vs. regular user” — different roles need different slices of the same API. This project is a custom Role-Based Access Control (RBAC) system built from scratch on Laravel, rather than relying on a one-size-fits-all package.
Solution
Built using Laravel Passport for OAuth2-based authentication, with custom middleware enforcing role and permission checks at the route level. Packaged with Docker so the access-control layer can be dropped into new projects with a consistent, reproducible setup.
Features
- Custom role and permission model
- Laravel Passport OAuth2 authentication
- Middleware-enforced route-level access control
- Dockerized for consistent setup across projects
Results
A reusable, self-contained RBAC foundation that can be adapted into new Laravel projects needing fine-grained API access control beyond basic authentication.