A production-ready microservices boilerplate built with Laravel and Docker. Demonstrates how to decompose a monolith into independent services that communicate via both REST HTTP and RabbitMQ message queues. Designed as a reference architecture for senior engineers building distributed systems.

Communication Patterns
REST (synchronous)
Used when a service needs an immediate response:

API Gateway → User Service (proxy user requests)
API Gateway → Order Service (proxy order requests)
Order Service → User Service (verify user exists before creating order)
RabbitMQ (asynchronous)
Used for fire-and-forget events that don’t need an immediate response:

User Service publishes user.registered → Notification Service sends welcome email
Order Service publishes order.created → Notification Service sends order confirmation
Order Service publishes order.status_changed → Notification Service sends status update

https://www.twine.net/signin

A standalone authentication and authorisation microservice built with Laravel. Designed to be consumed by other services via REST API. Covers the full auth surface: JWT tokens, Two-Factor Authentication (TOTP), Role-Based Access Control (RBAC), Redis-cached permissions, session management, and a full audit trail.

✨ Features
Token-based auth via Laravel Sanctum with expiry and multi-device session management
Two-Factor Authentication (2FA) — TOTP-based (Google Authenticator, Authy compatible)
Role-Based Access Control (RBAC) — flexible roles + permissions with many-to-many assignment
Redis-cached permissions — permissions cached per user, invalidated on role change or logout
Rate limiting — brute-force protection on login (5 attempts per minute per IP)
Audit logging — every auth event recorded (login, logout, 2FA, role changes)
Session management — list active sessions, revoke individual or all devices
PHPUnit feature tests covering all core flows

https://www.twine.net/signin