Breeze doesn’t include 2FA out of the box, so I implemented it custom by integrating google2fa-laravel.
Goal: make the product ready to go live with a solid security foundation.
I kept everything clean and maintainable:
dedicated controllers (setup + challenge)
separate “trusted devices” management
validation via Form Requests
logic moved into a service layer + dedicated query
Small steps, but production-level quality

Top comments (0)