TaskFlow API.

A multi-tenant SaaS backend for project & task management, built on Laravel 12.

Each company gets an isolated workspace to manage projects and tasks. API-only, Sanctum-authenticated, with authorization modeled as a real Laravel Policy instead of scattered checks — no scaffolding magic, no black boxes.

laravel 12 sanctum spatie/laravel-permission sqlite rest api

bash — ~/taskflow-api tenant tree

$ php artisan tinker
>>> $company->projects

Company                       # the tenant
 ├── User              # admin · manager · developer
 └── Project
      └── Task ──assigned_to──> User

tenant isolation — every query chains explicitly through auth()->user()->company
policy authorization — TaskPolicy governs who can view, update, assign, delete
role-based access — admin/manager see all company tasks, developer sees their own