Laravel Sanctum API Authentication | Laravel CRUD REST API with Sanctum Auth

In this video, I will expalin you how to create a REST API with Sanctum authentication in Laravel. We will create a CRUD REST API with Sanctum authentication for login and registration in Laravel.

#laravel #api #rest #crud #auth #authentication #sanctum #itsolutionstuff

[shraddhatapase]

very nice tutorial it really help me exactly content i am looking for you are really great

[shraddhatapase]

can you please add logout functionality in this video

[ibrah]

Hello bro. Its possible to make vidéo for laravel with nuxt (vue.js) ? Thanks bro

[Ravikumar-dpgu]

What happen if we hit authenticated api without token?

[Rcls]

This video should be polished. The registration endpoint does not account for users who might already be in the system. When you register, the endpoint should not tell the caller if the request was successful or not, as it can be used as a method to fish for existing users, but instead just give out an empty response. A verification email should be sent to confirm the email address at this point. The login endpoint here also returns the user instance (with a message "user registered"?), and somehow the same token generated upon registration. Tokens should be rotated and invalidated to increase security. This is also a reason I dislike Sanctum. You are creating perpetually valid tokens which can be used by malicious users with access to the system and you'd be none the wiser. The default settings are bad and a lot of people still use this approach. I much prefer a method of short lived access tokens and long lived refresh tokens. The window of attack is much shorter, but unfortunately Sanctum does not provide this capability. It also makes a roundtrip to the database on every request because these are essentially session tokens ie. stateful.

[rowdyreddys]

Hi bro. Create Global Loding Spinner for every http request and response in laravel or livewire

[joeylim]

im getting cors error during deployment, kindly assist