Getting started with Laravel Passport and OAuth2

In this 29 minute video, I'll show you how to install and use the powerful Passport authentication package in an example Laravel application. Postman helps a little, too.

You'll learn how to:
- Install and setup Laravel Passport
- Create and view a user's clients
- Generate authentication tokens with OAuth2 flow
- Create and use scopes to guard specific routes

0:00 - Intro
2:40 - Installing Passport
4:22 - Creating Clients
11:30 - Authorizing A Client
17:38 - Using Tokens
21:48 - Refreshing Tokens
23:58 - Using Scopes
29:08 - Wrapping Up

[aschmelyun]

Also I'm using a new style of recording and editing in this video where I talked while recording, instead of doing them separately like my previous videos. If you noticed a difference and did (or did not) like it compared to my previous videos, please let me know below!

[Samuel.Mwangi]

Thanks Andrew for a great video as always.
As a sidenote, am loving your updated thumbnail style (Legend has it you have updated even past videos with this new style)

[kennethramos]

Greate tutorial, I was able to learn the concept behind this and how to integrate laravel/passport to my api. Thank you so much for this. Hoping to find more useful tutorial from you.
God bless!

[Nageswararao]

Thank you so much for the detailed explanation

[rjee]

Great help for Laravel passport package usage,
Thanks.👍

[uweopfern]

Hi, Andrew thank you so much for this, I am implementing the same thing, but I got one blocker, if a user does not verify their emails, still that endpoint of authorize will be consumed regardless of user email verification, any idea on how to check email verification before issuing that code

[AnilBaniyaNep]

hi Andrew Schmelyun, thanks for the video. Whats the flow to get an authorization code for mobile application? Should the mobile app user should redirect to the browser for authentication and follow the same process as in web or there is another process for mobile application?

[googlemap]

hi, I have an error with Authorizing A Client ( "hint": "Cannot decrypt the authorization code"). I searched for this error on google but it is not clear and I can't understand it. Thanks!

[madhand]

hi
I am using passport oauth2 in lumen

I got error Authorization request was not present in the session.

[jjplays]

Which IDE/editor you are using?
and it's settings? :) please share

[lwxqqsw]

is the scope on passport same with access permission for the user?

[delvinnj]

Thank you, and how to get the details for the domain that is used in our API

[SEOng-gslj]

Must a client belong to a user? why did passport create 2 clients with user_id == null? Can those 2 clients be used?

[ajisurya]

can make 1 token oauth api to use the other api in laravel passport?

[adics]

Great Explanation.. But how can I get the refresh token without sending the client secret (I'm using PKCE)? Can anyone explain it to me?

[joalbertylosorio]

How do i implement this with a frontend built

[devarm]

Hey Andrew, what if we are using an API instead of having a client? Will it be the same flow?

[amitleuva]

I am receiving 'Unauthenticated ' message when trying to access data using access-token

[jacktapanut]

How to create your dashboard UI? Please share more your clip.

[mrarmani]

THis example if the passport used in the same system. How about if they are in the different system?