Spensara Knowledge Base & Documentation Repository

System Overview Brink & Borg Master Index (722 Docs) Spensara Platform Project Tracker

Repository Docs & Knowledge Base

Consolidated Spensara documentation repository (722 Markdown & architecture documents in ../repository)

Built Word Documents (.docx): Spensara Overview (.docx) Capability Assessment (.docx) Brink POS Ingestion Analysis (.docx) The Borg Ingestion Architecture (.docx)

Categories

Implementation Specs (157)

Detailed engineering and feature implementation specifications.

implementation-specs/specs/BackendDatabaseConsolidation/TASK4.1.md 1,382 bytes · Updated Oct 23, 2026 10:44 AM EDT

Raw File

TASK 4.1: Replace Laravel auth with Keycloak-backed BFF auth flow

Summary

Refactor Laravel authentication so it no longer uses Eloquent users or database-backed session state.

Dependencies

TASK 1.1 complete
TASK 3.2 complete

Files to Modify

Likely files:

Front/app/Http/Controllers/LoginController.php
Front/app/Http/Controllers/Admin/AdminAuthController.php
Front/config/auth.php
Front/config/session.php
Front/bootstrap/app.php
auth middleware under Front/app/Http/Middleware
any new auth support classes under Front/app

Required Behavior

Laravel must:

redirect users through Keycloak-backed login,
retain authenticated context without database-backed sessions,
authorize routes based on trusted user context rather than Eloquent models,
support logout cleanly,
stop calling Auth::attempt against local records.

Acceptance Criteria

[ ] Laravel login no longer uses local DB-backed credentials
[ ] Laravel session storage is not database-backed
[ ] Auth middleware can enforce user/admin access without Eloquent user records
[ ] Logout flow works with Keycloak-backed identity
[ ] Laravel can run without a configured database connection for auth

Notes

If a lightweight custom authenticated-user object is needed in Laravel, it should be built from token/session data, not a database model.