Answers for "api authentication laravel 8"

laravel 7 user registration using api post endpoint

<?php

namespace App\Http\Controllers;


use Illuminate\Http\Request;
use App\User;

class AuthController extends Controller
{
    public $loginAfterSignUp = true;

    public function register(Request $request)
    {
      $user = User::create([
        'name' => $request->name,
        'email' => $request->email,
        'password' => bcrypt($request->password),
      ]);

      $token = auth()->login($user);

      return $this->respondWithToken($token);
    }

    public function login(Request $request)
    {
      $credentials = $request->only(['email', 'password']);

      if (!$token = auth()->attempt($credentials)) {
        return response()->json(['error' => 'Unauthorized'], 401);
      }

      return $this->respondWithToken($token);
    }
    public function getAuthUser(Request $request)
    {
        return response()->json(auth()->user());
    }
    public function logout()
    {
        auth()->logout();
        return response()->json(['message'=>'Successfully logged out']);
    }
    protected function respondWithToken($token)
    {
      return response()->json([
        'access_token' => $token,
        'token_type' => 'bearer',
        'expires_in' => auth()->factory()->getTTL() * 60
      ]);
    }

}

laravel token authentication

# Database Preparation
// add api_token to users table
Schema::table('users', function ($table) {
    $table->string('api_token', 80)->after('password')
                        ->unique()
                        ->nullable()
                        ->default(null);
});

// Create token for existing users, code can also be added to registerController
    $token = Str::random(60);
    $user = User::find(1);
    $user->api_token = hash('sha256', $token); // <- This will be used in client access
    $user->save();



//config/auth.php
    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'token', // <- Add this entry
            'provider' => 'users',
            'hash' => false,
        ],
    ],

          
          
//routes/api.php
    // Add "middleware('auth:api')" as below        
	Route::middleware('auth:api')->get('/user', function (Request $request) {
        return $request->user();
    });          



//client access example (in Vue js)

axios.get('http://example.com/api/user', 
          {
  headers: { 
    'Accept': 'application/json', 
    'Authorization': 'Bearer '+ 'user-api-token'
  }
}
         )
  .then(function (response) {
  // handle success
  console.log(response);
})
  .catch(function (error) {
  // handle error
  console.log(error);
})

laravel api authentication

<?php
  
//custom made middleware for token generation and user authentication

//below code for Middleware file in /app/Http/Middleware
namespace App\Http\Middleware;
use Closure;
use \App\Admin;
use Illuminate\Support\Facades\Auth;

class ApiAuthenticate {
   public function handle($request, Closure $next) {

      $token = $request->bearerToken(); //set as Authorization -> Bearer token... in api requests
      
      if ($token) {

          $user = Admin::where('remember_token', $token)->first();

          $request->request->add(['user' => $user]); //to fetch logged in user details in other apis

          if ($user) {
            return $next($request);  //pass on the params to controller
          } else {
            return response()->json('Token expired.');
          }
          
      } else{

        if (Auth::guard('admin')->attempt(['email' => $request->email, 'password' => $request->password], $request->get('remember'))) {

            $remember_token = \Str::random(60);

            $user = Auth::user();
            $user->last_login = new \DateTime();
            $user->remember_token = $remember_token;
            $user->save();

            $remember_token = Admin::where('id', Auth::user()->id)->value('remember_token');
          	//remember_token is fetched separately, as it set hidden in its Model

            $data = ['remember_token'=>$remember_token]; //to use as Authorization -> Bearer remember_token, in other apis.
            return response()->json($data);
        }

      }

      return response()->json('Incorrect Credentials');
      // return $next($request);

   }
}


//pass below line in /routes/api.php
Route::post('leads', 'Api\UserController@index')->middleware('auth_api');


//use below code in Controller file
<?php

namespace App\Http\Controllers\API;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;

class UserController extends Controller
{
  /**
    * Display a listing of the resource.
    *
    * @return \Illuminate\Http\Response
    */
  public function index(Request $request)
  { 
   $data = ['user'=> 'data'];
    return response()->json($data);
  }

}

//also don't forget to pass this Middleware class in  /app/Http/Kernel.php  
protected $routeMiddleware = [
  
        'auth_api' => \App\Http\Middleware\ApiAuthenticate::class,
    ];

encrypt api token laravel

<?php

use Illuminate\Database\Migrations\Migration;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Support\Facades\Schema;

class CreateCEOSTable extends Migration
{
    /**
     * Run the migrations.
     *
     * @return void
     */
    public function up()
    {
        Schema::create('c_e_o_s', function (Blueprint $table) {
            $table->id();
            $table->string('name');
            $table->string('company_name');
            $table->year('year');
            $table->string('company_headquarters');
            $table->string('what_company_does');
            $table->timestamps();
        });
    }

    /**
     * Reverse the migrations.
     *
     * @return void
     */
    public function down()
    {
        Schema::dropIfExists('c_e_o_s');
    }
}

how auth with api in laravel

$data = $request->all();
Auth::attempt(['email'=>$data['email'] , 'password'=>$data['password']])