TrustLab API is the robust backend engine powering the TrustLab ecosystem. Built on Laravel 12, it provides secure authentication, comprehensive role-based access control, and specialized services for CA (Certificate Authority) management and user support.

🚀 Key Features

🔐 Advanced Authentication & Security

Multi-Guard Auth: Powered by Laravel Sanctum for secure SPA (Single Page Application) authentication.
OAuth Integration: "Mirror Callback" system handling Social Login (Google, GitHub) via Laravel Socialite.
Role Hierarchy:
- Owner (Supreme): Full control, manages Admins and Customers.
- Admin: Manages Customers only. Cannot modify Owners.
- Customer: Standard user access.
Email Verification: Fully integrated verification flow with rigorous middleware protection (verified).
Turnstile Protected: Endpoints designed to work with frontend-only Cloudflare Turnstile gatekeeping.

📜 Core Services

Certificate Management: Logic for handling Certificate Authority operations (CSR, Keys, Signing).
Ticket System: Complete support desk backend with attachment support and admin-user communication channels.
User Management: Administrative endpoints for managing the user lifecycle (Ban, Promote, Verify).
Inquiry System: Public contact form handling with database persistence and notification triggers.

🛠️ Technology Stack

Framework: Laravel 12.x
Database: MySQL / MariaDB
Authentication: Laravel Sanctum
Permissions: spatie/laravel-permission
Social Auth: laravel/socialite
Testing: PHPUnit

📂 Project Structure

app/Http/Controllers/Api: Core API logic separated by domain (Admin, User, Public).
app/Models: Eloquent models with strict typing and relationship definitions.
routes/api.php: Centralized API route definitions grouped by middleware and version (v1).

Languages

PHP 74.8%

Blade 10.4%

HTML 7.3%

CSS 6.3%

Shell 1%

Other 0.2%