From 965f6e59d4df5b1eb298795558d270b86f2d866e Mon Sep 17 00:00:00 2001
From: Dillon Ngo <dillonngoweijoon@gmail.com>
Date: Fri, 3 Apr 2026 06:27:29 +0800
Subject: [PATCH] [sanctum] Update: laravel 8 to 12, php 7.3 to php 8.3,
 Jenkinsfile, Unit/Feature testing, vapor, docker

---
 app/Providers/AppServiceProvider.php |   5 --
 composer.json                        |   1 +
 config/sanctum.php                   | 112 ++++++++++++++-------------
 3 files changed, 58 insertions(+), 60 deletions(-)

diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
index dfe08f82..e4866e98 100644
--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -4,10 +4,6 @@ namespace App\Providers;
 
 use Illuminate\Support\Facades\Schema;
 use Illuminate\Support\ServiceProvider;
-// use Laravel\Sanctum\Sanctum;
-use Illuminate\Cache\RateLimiting\Limit;
-use Illuminate\Http\Request;
-use Illuminate\Support\Facades\RateLimiter;
 
 class AppServiceProvider extends ServiceProvider
 {
@@ -18,7 +14,6 @@ class AppServiceProvider extends ServiceProvider
      */
     public function register()
     {
-        // Sanctum::ignoreMigrations();
         Schema::defaultStringLength(191);
     }
 
diff --git a/composer.json b/composer.json
index a7270ee8..1c14bb6b 100644
--- a/composer.json
+++ b/composer.json
@@ -20,6 +20,7 @@
         "intervention/image": "^2.7|^3.0",
         "kwn/number-to-words": "^2.11",
         "laravel/framework": "^12.0",
+        "laravel/sanctum": "^4.0",
         "laravel/tinker": "^2.9",
         "laravel/vapor-cli": "^1.55",
         "laravel/vapor-core": "^2.33",
diff --git a/config/sanctum.php b/config/sanctum.php
index 26483d41..7c2f6ff5 100644
--- a/config/sanctum.php
+++ b/config/sanctum.php
@@ -1,67 +1,69 @@
 <?php
 
-// use Laravel\Sanctum\Sanctum;
+$currentApplicationUrlWithPort = class_exists(\Laravel\Sanctum\Sanctum::class)
+    ? \Laravel\Sanctum\Sanctum::currentApplicationUrlWithPort()
+    : (env('APP_URL') ? ','.parse_url(env('APP_URL'), PHP_URL_HOST) : '');
 
-// return [
+return [
 
-//     /*
-//     |--------------------------------------------------------------------------
-//     | Stateful Domains
-//     |--------------------------------------------------------------------------
-//     |
-//     | Requests from the following domains / hosts will receive stateful API
-//     | authentication cookies. Typically, these should include your local
-//     | and production domains which access your API via a frontend SPA.
-//     |
-//     */
+    /*
+    |--------------------------------------------------------------------------
+    | Stateful Domains
+    |--------------------------------------------------------------------------
+    |
+    | Requests from the following domains / hosts will receive stateful API
+    | authentication cookies. Typically, these should include your local
+    | and production domains which access your API via a frontend SPA.
+    |
+    */
 
-//     'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
-//         '%s%s',
-//         'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
-//         Sanctum::currentApplicationUrlWithPort()
-//     ))),
+    'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
+        '%s%s',
+        'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
+        $currentApplicationUrlWithPort
+    ))),
 
-//     /*
-//     |--------------------------------------------------------------------------
-//     | Sanctum Guards
-//     |--------------------------------------------------------------------------
-//     |
-//     | This array contains the authentication guards that will be checked when
-//     | Sanctum is trying to authenticate a request. If none of these guards
-//     | are able to authenticate the request, Sanctum will use the bearer
-//     | token that's present on an incoming request for authentication.
-//     |
-//     */
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Guards
+    |--------------------------------------------------------------------------
+    |
+    | This array contains the authentication guards that will be checked when
+    | Sanctum is trying to authenticate a request. If none of these guards
+    | are able to authenticate the request, Sanctum will use the bearer
+    | token that's present on an incoming request for authentication.
+    |
+    */
 
-//     'guard' => ['web'],
+    'guard' => ['web'],
 
-//     /*
-//     |--------------------------------------------------------------------------
-//     | Expiration Minutes
-//     |--------------------------------------------------------------------------
-//     |
-//     | This value controls the number of minutes until an issued token will be
-//     | considered expired. If this value is null, personal access tokens do
-//     | not expire. This won't tweak the lifetime of first-party sessions.
-//     |
-//     */
+    /*
+    |--------------------------------------------------------------------------
+    | Expiration Minutes
+    |--------------------------------------------------------------------------
+    |
+    | This value controls the number of minutes until an issued token will be
+    | considered expired. If this value is null, personal access tokens do
+    | not expire. This won't tweak the lifetime of first-party sessions.
+    |
+    */
 
-//     'expiration' => null,
+    'expiration' => null,
 
-//     /*
-//     |--------------------------------------------------------------------------
-//     | Sanctum Middleware
-//     |--------------------------------------------------------------------------
-//     |
-//     | When authenticating your first-party SPA with Sanctum you may need to
-//     | customize some of the middleware Sanctum uses while processing the
-//     | request. You may change the middleware listed below as required.
-//     |
-//     */
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Middleware
+    |--------------------------------------------------------------------------
+    |
+    | When authenticating your first-party SPA with Sanctum you may need to
+    | customize some of the middleware Sanctum uses while processing the
+    | request. You may change the middleware listed below as required.
+    |
+    */
 
-//     'middleware' => [
-//         'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
-//         'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
-//     ],
+    'middleware' => [
+        'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
+        'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
+    ],
 
-// ];
+];