Laravel Passport

Deploy the keys

The key files (storage/oauth-private.key and storage/oauth-public.key) must be deployed. The serverless.yml file generated for Laravel excludes the storage/ directory, include the keys in the package:

package:
    patterns:
        # Exclude the 'storage' directory
        - '!storage/**'
        # Except the public and private keys required by Laravel Passport
        - 'storage/oauth-private.key'
        - 'storage/oauth-public.key'

The keys are not committed to git: if you deploy from CI, make them available there (you can generate them with php artisan passport:keys).

On Lambda, Bref moves the storage directory (storage_path()) to /tmp, so Passport does not find the keys at their default location. Load them from the deployed storage/ directory in AppServiceProvider::boot():

use Laravel\Passport\Passport;
 
public function boot(): void
{
    Passport::loadKeysFrom(base_path('storage'));
}

Deploy

You can now redeploy the application:

bref deploy

serverless deploy

Run the migrations

Create the Passport tables in the production database:

bref command "migrate --force"

serverless bref:cli --args="migrate --force"

Create clients

Finally, create the OAuth clients your application needs, for example a personal access client:

bref command "passport:client --personal --name 'Laravel Personal Access Client'"

serverless bref:cli --args="passport:client --personal --name 'Laravel Personal Access Client'"

Since Passport 12, the password grant is disabled by default: to create a password grant client (passport:client --password), first call Passport::enablePasswordGrant() in AppServiceProvider::boot() and deploy.