LAUNCHFORGE / TECHNICAL GUIDE

Laravel + Nuxt.
One origin.

Two independent applications, one clear workflow. Explore the links between the Nuxt interface, Laravel sessions and your first deployment.

← The product

One browser. One origin. Two applications.

In the Docker stack, Nginx routes /api to Laravel and pages to Nuxt. PostgreSQL stores data; a worker processes queued mail. This showcase is separate from that application.

Browser
Nginx gateway
Nuxt · interface
Laravel · sessions + API
PostgreSQL · data
Worker · mail queue

LaunchForge uses Laravel web routes and sessions. The browser keeps an HttpOnly cookie; no authentication token goes into localStorage. The frontend obtains a CSRF token before mutations. Roles and entitlements are decided on the server.

Follow a sign-in, one step at a time.

Local educational simulation: no account created, no API request and no data entered. This panel explains the code; it does not replace application acceptance testing.

  1. 01 · CSRFGET /api/csrf
  2. 02 · Sign-inPOST /api/login · X-CSRF-TOKEN
  3. 03 · WorkspaceGET /api/me
  4. 04 · Sign-outPOST /api/logout
The browser receives the CSRF token tied to its session.

Start with the source pack.

After obtaining the pack through an authorized channel, verify its checksum and extract it into a clean directory. Requirements: PHP 8.3 with PDO SQLite, Composer 2 and Node 22. Dependencies are downloaded on first installation.

./scripts/install.sh
# Terminal 1
cd backend && php artisan serve --host=127.0.0.1 --port=8220
# Terminal 2
cd frontend && npm run dev
# Terminal 3
cd backend && php artisan queue:work --tries=3 --timeout=60

The script installs dependencies and migrates the database; it is not a production backup. Locally, password reset uses the log mailer: a link in a log is not evidence of mailbox delivery.

For your first Docker deployment

The pack includes an Nginx gateway, PHP-FPM, Nuxt, PostgreSQL and a worker. You supply a domain, HTTPS, secrets and backup storage. Included guides cover startup, verification and rollback. Stack tests do not validate your own VPS.

Specific evidence. Visible limits.

Frozen RC7

387 equivalent ZIP/tar files; 120 runtime files identical to the accepted CI candidate.

Application

22 backend tests / 98 assertions, Nuxt build, auth/CSRF browser acceptance and Compose passed. Dependency audit zero at candidate verification; not a security certification.

Private TEST delivery

Direct Stripe account: hosted fictitious EUR1 purchase, exact ZIP, cookie-free recovery, refund and signed-webhook revocation verified on 8 October 2026.

LIVE availability, distinct from sales proof

Pro99EUR is available to businesses in metropolitan France. Native public TEST fulfillment passed; no actual LIVE paid-order fulfillment or revenue is claimed. Delivery and recovery need no application email; no customer installation is claimed.

RC7 ZIP · 5,335,693 bytes · SHA-256

4e3e3b9cb9dab495f31c431e221fd8de641c1530118afd349c1a61fae9bbd20a

See the actual installed RC7 result ↗

Pro — 99 € total, one-time purchase

For businesses established in metropolitan France. One commercial product and its development/test/production environments; 30 days of installation and reproducible-bug support. Hosting and third-party services are your responsibility. Read the accepted terms before purchasing.

Buy Pro — 99 € Read Pro terms

Current scope: email/password, reset, member/admin roles, account deletion, queued welcome mail and optional one-time Stripe. Teams, OAuth and subscriptions are excluded.

Building in PHP/Vue and interested in discussing a pilot installation?

Contact the publisher ↗

Official references

Laravel 12 · Authentication · Laravel 12 · CSRF