User
Auth
Create a store account, sign in, and recover access through the store’s own authentication pages.
Step-by-step guide
Before you start
Use the account and workspace that own the relevant records. The feature also needs to be enabled for this installation and plan.
Open this feature
- Open /auth/signup on your site.
Steps
Create a store account
- Open /auth/signup, or choose Create an account from the sign-in page. These button labels follow the bundled Sofia theme; another installed theme can use different wording.
- Enter Full name, Email address and a unique Username. The username must contain 5–64 characters with no spaces.
- Enter a private Password of at least six characters and matching Confirm password. Select your actual Timezone.
- Read the linked terms and select the agreement checkbox if you agree. Complete CAPTCHA when shown, then select Create account.
- Follow the application’s confirmation or activation instructions. If an activation email is required, use the message sent to your own inbox.
Sign in to the store
- Open /auth/login. Enter Email or username and Password.
- Use Remember me only when appropriate for your own device. Complete CAPTCHA if shown and select Sign in.
- Check the account identity after sign-in. If an additional code is requested, use the code issued for that account; do not share it with another person.
Reset a forgotten password
- On sign-in, choose Forgot password?, or open /auth/forgot-password.
- Enter the account’s Email address and select Send reset link.
- Open the reset link in your own inbox. On the recovery page, enter New password and matching Confirm new password.
- Select Save new password, then return to sign-in. If you opened the recovery page without its email link, use Request a reset link instead of inventing a token.
Fields and choices
The task above names the fields to complete and explains the choices that affect its outcome.
Check the result
Use the expected result beside each task. Check the intended account, record and final state; a saved draft, submitted request or displayed link is not the same as a completed external action.
Common problems
| Problem | What to check |
|---|---|
| The screen or action is missing | Check the correct workspace account, role, enabled app and plan. A hidden action is not fixed by typing an internal endpoint. |
| A field is rejected | Read its validation message, choose from the offered options and check the relevant format or limit. Do not substitute a database ID for a displayed choice. |
| A list is empty | Check the selected workspace, search text, date range and status filters. Clear one filter at a time before concluding that records are missing. |
| A request is still pending | Check its status/history before repeating it. For messages, publishing, imports and payments, a submitted request can finish later or fail separately. |
Technical reference
Role-scoped source references
Pinned commit: 275481cdd3c8519a24c5ecf5cac3e11ceb1708d8
- modules/Auth/app/Http/Controllers/AuthController.php
- modules/Auth/resources/views/activation.blade.php
- modules/Auth/resources/views/admin-code.blade.php
- modules/Auth/resources/views/forgot_password.blade.php
- modules/Auth/resources/views/login.blade.php
- modules/Auth/resources/views/recovery_password.blade.php
- modules/Auth/resources/views/resend_activation.blade.php
- modules/Auth/resources/views/signup.blade.php
Source-only route information
| Method | Source-default route |
|---|---|
| GET | /auth/signup |
| GET | /auth/login |
| GET | /auth/admin-code |
| GET | /auth/forgot-password |
| GET | /auth/recovery-password |
| GET | /auth/resend-activation |
| GET | /auth/activation |
| GET | /auth/login/facebook |
| GET | /auth/login/x |
| GET | /auth/login/google |
| GET | /auth/login/facebook/callback |
| GET | /auth/login/google/callback |
| GET | /auth/login/x/callback |
| POST | /auth/do_signup |
| POST | /auth/do_login |
| POST | /auth/do_admin_code |
| POST | /auth/do_forgot_password |
| POST | /auth/do_recovery_password |
| GET | /auth/login-as-user |
| GET | /auth/login-as-admin |
| GET | /auth/logout |
| POST | /auth/sidebar-state |
| GET | /auth/view-as-user/{any} |
| GET | /auth/leave-impersonate |
Unmapped fields — not user instructions
These fields belong to this role’s source handler, but their screen labels were not confirmed.
| Source key | Handler |
|---|---|
| fullname | modules/Auth/app/Http/Controllers/AuthController.php |
| modules/Auth/app/Http/Controllers/AuthController.php | |
| username | modules/Auth/app/Http/Controllers/AuthController.php |
| timezone | modules/Auth/app/Http/Controllers/AuthController.php |
| username | modules/Auth/app/Http/Controllers/AuthController.php |
| remember | modules/Auth/app/Http/Controllers/AuthController.php |
| modules/Auth/app/Http/Controllers/AuthController.php |