route_audit
Audit Laravel route files for security misconfigurations including unprotected admin routes, unauthenticated API endpoints, missing login throttling, and CSRF exception issues.
Instructions
Audit Laravel route files (routes/web.php, routes/api.php) for security misconfigurations. Detects admin routes without auth middleware, API routes without authentication, login routes without throttle, and CSRF exception wildcards in VerifyCsrfToken.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Absolute path of the target Laravel project |