Laravel API Crash Course With Sanctum | Laravel Sanctum Full Tutorial | How to Build Laravel API

[@codewithdary]

If you're looking to level up your Laravel skills? My new course "Mastering Laravel 10 Query Builder, Eloquent & Relationships" is the perfect opportunity: www.udemy.com/course/mastering-laravel-10-query-builder-eloquent-relationships/?referralCode=C784C3DB5B8925207FCB

[@devopsdevelopoptions409]

and i want to say that the video was perfect for me as a beginner in apis

[@AstreonOfficial]

When declaring resource routes that will be consumed by APIs, you will commonly want to exclude routes that present HTML templates such as create and edit. For convenience, you may use the apiResource method to automatically exclude these two routes. Like this: Route::apiResource('tasks', TasksController::class);

[@codewithdary]

Wait I didn’t do that in this tutorial! I’m ashamed! you are completely right.

[@tacanda6479]

Your tutorials are way more transparent than the videos on Laracast

[@codewithdary]

Thank you so much. Laracasts is incredible too :D

[@adeoluayobami6810]

I wanted to also say this

[@soliuabdulkadir4488]

Pls I am stuck while following the tutorial. I couldn't get the tinker to create the Tasks as it is returning "Error Class Task not found"

[@nigmadude]

@@soliuabdulkadir4488 just specify the path of your Task class , like \App\Models\Task

[@naiveneger39]

​@@codewithdary hello for the tasks how can we show tasks belonging only to logged in user

[@sv2109]

Man, you have a real talent for explaining complex topics so that they seem very simple

[@codewithdary]

Thank you so much, Volodymyr!

[@joshmakar9161]

This crash course not only explained the basics of using Sanctum but also included a ton of valuable information about configuring APIs, using ResourceControllers, implementing custom requests, and so much more. Very well done!

[@codewithdary]

Thank you so much, I appreciate your kind words Josh!

[@meetwithchuks8861]

I love your tutorials; clear and in-depth. This is the latest and the best. Many thanks.

[@codewithdary]

Thank you so much Chuks!

[@jackreacher8632]

Before I even finish this video let me say that your are an amazing professor. That tutorial is so fluent , explaining patiently concepts I was hardly trying to understand. Thank you very much from Burkina Faso.

[@cryswerton-silva]

Best video on Laravel Sanctum ever!!

[@codewithdary]

Wow, thank you

[@AbderrahmanFodili]

you are a lifesavour . I loved you content when I was still learning a year ago and I am even more thankful that you posted this video now that I got a job and I am asked to make an API. your methods are light years ahead of my put together garbage API . thank you good sir

[@codewithdary]

Thank you so much Abderraham! Tried my best making it easy for you. I've also got a video where I create a property listing API, might be useful for you too :)

[@MrWorkman2010]

What!! I have successfully gone through this entire tutorial. Was very helpful.

[@knockedbull7087]

Very well explained with details, common mistakes and coding things step by step so we are not saturated. One of the best teacher i've watched so far. Thanks a lot for this tutorial

[@codewithdary]

Wow, your comment just made my day. Thank you so much :)

[@madie2659]

Best Laravel video with great explanations I have seen on KZbin.. Thank you sooo much for this video

[@sb-dor]

thank you so much man, I've been working as a full-stack developer for a long time, and i didn't know some of that stuffs in laravel. push forward bro. greate video!

[@codewithdary]

Wow, I'm happy that I could help!!

[@codewithdary]

YOU CAN FIND ME ON TWO NEW PLATFORMS. 🔥TikTok: www.tiktok.com/@codewithdary 🔥Blog: blog.codewithdary.com/ AND ON 🔥Instagram: instagram.com/codewithdary/ 🔥Twitter: twitter.com/codewithdary

[@LuiBorosu]

If there is anything that i want to complain about in this tutorial, you need to show us every namespace that you used inside your controller. not all of us who are trying to learn laravel knows how to automatically add them whenever you used a class that isnt inside of the controller originally. It confused the heck out of me. 6/10. man do what i just said and it will be instant 9/10. cuz its such bummer to suddenly getting an error when i literally do everything you did step by step.

[@codewithdary]

Namespaces are something you should learn in PHP, and not so much in Laravel. Let alone starting with Laravel Sanctum, which you shouldn't learn if you have no idea how namespaces work. I understand your concern, but I can't explain every single step over and over again, overwise people will start complaining about me repeating myself :) A part of being a developer is also making decisions on your own. You shouldn't just follow the tutor and expect to be a developer after a certain amount of hours.

[@user-pv8jn9cz4l]

Hi Dary, very good video. Just one small suggestion: pause for a second or two before you switch screen or program, so that your viewers get a chance to pause. Also, there is a small problem with the cli when the screen is paused, as YT's control overlaps on the last line, which happens to be what you are typing. So maybe using a ssh client to connect locally?

[@codewithdary]

Thank you for the feedback, it is truly appreciated! I will definitely implement your feedback.

[@zoltanfodor1605]

It was a good-quality video. Thanks a lot, Dary!

[@codewithdary]

Glad you liked it, Zoltan!

[@edi_gun_awan]

Thank you. I retired from JS framework hell from now on.

[@codewithdary]

I feel you! Haha :)

[@mohammadhosseinmoradi2021]

It was very very useful. Thanks a lot to Mr. dary ❤for creating tutorial contents. Your tutorials are the best! I'm from iran country. I like next tutorial was be about the role based API and custom middleware. I look forward to your next tutorials.

[@codewithdary]

Thank you so much Mohammad, I try to do my best for you :)

[@EddieMao]

Wow, wonderful tutorial, Dary. Thank you so much.

[@codewithdary]

Happy to help! :)

[@HarshSharma-xp7uf]

Fantastic Tutorial Dary. I am a newbie to laravel and your videos are just fantastic. Thank you

[@codewithdary]

Thank you so much Harsh, truly appreciate your kind words.

[@belaouraabdelwahab]

Awesome video thanks 👍 Please add more videos about API other methods like email confirmation, password reset, OTP confirmation for mobile .... Thanks again for the tutorial

[@codewithdary]

Sounds interesting! But the code will pretty much be the same as I’ve build in my other tutorials!

[@XFX0629]

Amazing tutorial. Extremely clear and useful. Thanks a lot!

[@codewithdary]

Glad you enjoyed it!

[@kavehsarkhanlou8608]

You are wrapping your credentials array in an extra array. Remove the extra array wrap in line 21 at 37:58

[@nishaladhin7357]

This actually solved my error! Thanks!

[@cjlacaste28]

thank you.

[@PacificDev]

Great video! Thanks 👊 When validating a form request you actually don't need to call request->all() inside the validated() method. It doesn't need it. The validated method returns an array with the validated fields.

[@codewithdary]

That is correct! Don't know why I did that....

[@afolabiabiodun7582]

You're too good. You made it easy

[@codewithdary]

Awesome

[@charbel12334]

getting a jumpscare with the start of each section😂. Very useful tutorial! Can you please make the frontend of this application with react js

[@codewithdary]

I have to keep my students awake you know :)

[@feedgaming8374]

tysm, you are so good at explaining subjects like this, appreciate your efforts,

[@codewithdary]

You're very welcome!

[@gp6723]

Great one!

[@codewithdary]

Thank you so much :)

[@ThaRealIansanity]

Small mistake in LoginUserRequest ? I think you referred to the 'email' rule as meaning it comes from the 'email' column. Actually validates that it is a properly formed email address. Also what is the need for 'string' rule if we are making sure it is a valid email? And for the password, Password::default() used in the register request rules has min:8 by default where we used min:6 in our login request. I just used Password::default() in both requests to make sure the rules match. Otherwise excellent course so far. I'm learning a lot and looking forward to moving to your authentication videos next

[@codewithdary]

Thank you Ian! I'm here to learn too ;)

[@n3volja]

I loved this! Thank you for making this.

[@codewithdary]

Thank you for your kind words!!

[@mohamedadel936]

Thank you Dary 😍 I learned a lot from this video ❤

[@codewithdary]

I'm so happy that you dod Mohamed! :)

[@md.ruhulamin7963]

Thank you sir, this is very clear, simple and informative. One request, would you please add how to handle image in API. Thank you.

[@codewithdary]

Thank you for watching Ruhul. It needs to happen in the same way as "not with APIs"!

[@josephofodum7895]

This is my first video on laravel and it is very enlightening.

[@onesentientbeing6311]

"You don't need to dream about Laravel at night" - CWD. Good one🤣👍.

[@codewithdary]

Right? 😂

[@felixowino3271]

I get an error message in the postman SQLSTATE [42S22] column not found when i test login with a user who is not in the database, what could be the issue?

[@ChBoss-fc2yj]

Hay Felix, try "if(!Auth::attempt($request->only('email','password'))) {" instead of "if(!Auth::attempt([$request->only('email','password')])) {"

[@ThaRealIansanity]

@@ChBoss-fc2yj Thanks I'm always forgetting you can hover or ctrl+click on functions to see their definitions. It already returns an array 🙂

[@mudso]

@@ChBoss-fc2yj GREAT THANKS! you saved my day, is that square bracket a laravel 9 or 10 thing?

[@kimelironald4451]

Good staff,,,You are really doing something Amazing. API is my favorite. Make a simple mysql cli tutorial, very short is enough

[@codewithdary]

Thank you Kimeli! Not sure if I be doing that any time soon.

[@kimelironald4451]

@@codewithdary No worry.Thanks

[@wikichua3577]

i love all your tutorials. hope to learn more from your up coming tutorial, appreciated if there is laravel livewire and alpinejs tutorial.

[@codewithdary]

Great suggestion!

[@LeonelLopezBorbon]

That's magnific your tutorial more clear understand! Thank very much! TOP!

[@codewithdary]

Glad it helped Leonel!

[@arash5094]

i like you tutorials

[@codewithdary]

Thank you so much, Arash

[@abrhamb2952]

Best Course on Sanctum Thanks a lot , Do you have Laravel Fortify Course ?

[@codewithdary]

Thank you so much Abrham! I unfortunately don't :(

[@luisuran4050]

Something that bothers me is that on the update method you are giving the user the chance to update any field. I would instead do "$task->update($request->only(['name', 'description', 'priority']));"

[@codewithdary]

I'm happy you saw that. Honestly don't really have a reason why I used it inside the AuthController and not inside of the TasksController. Just a mistake on my part.

[@Muhammed-nani964]

Noice video Dary we need more videos about auth with api for SPA front-end, and I have a question about authentication for a project. I'm confused about whether to use cookie or token-based API authentication. Which one do you suggest and which one is more secure? especially for SPA front-end

[@codewithdary]

Hi Muhammed! It's difficult to judge without knowing the project's background. However, token-based authentication is useful for storing data on the client-side, while cookie-based authentication is suitable for storing less secure data, as cookies can be vulnerable.

[@ahmedsabri6275]

this was so amazing and helpful thanks for this tutorial

[@codewithdary]

Thank you so much Ahmed!

[@mahamedassoul6960]

your tutorial was very very helpful, thank you so much 👏

[@codewithdary]

Thank you for watching Mahamed!

[@jjplays404]

Awesome dude, for covering advance topic😁😁

[@codewithdary]

Thank you so much :)

[@user-nb7nb1hh1j]

Good stuff 👍

[@miyirbek6821]

Thanks a lot bro. You helped me so much

[@codewithdary]

I'm happy that I could help!

[@mr_farukhaleem]

Thank you @codewithdary . Your video tutorial is very helpful and easy to learn. Which packages or feature of a Laravel should we learn more to make a complete app for backend API. like like for sending emails, que jobs, uploading files..

[@codewithdary]

You shouldn't really learn packages, because they usually have good docs. You need to level up your Laravel skills to learn APIs!

[@robinncode]

Thank you very much. Your Tutorial was very clear and easy to learn. You are awesome!!!

[@codewithdary]

Thank you so much for your kind words, it's truly appreciated!

[@SR-hp4tp]

Amazing tutorial !

[@codewithdary]

Thank you!

[@ulaskorpe]

thank you for this tutorial

[@codewithdary]

You're welcome 😊

[@chrisngkaixing320]

Nice video! Thank you for your great content, it's clear and easy to understand.

[@codewithdary]

Thank you Chris! Hoped it help you out :)

[@7Janiel]

Very good tutorial sir

[@kh1amirhamza]

Wonderful Tutorial!

[@codewithdary]

Thank you! Cheers!

[@w155uu]

hope you complete this tutorial by adding an extra section about token abilities and authorization. thanks

[@codewithdary]

The tutorial is very complete, what you want is additions :)

[@hichamelbachari2655]

what an amazing video!

[@codewithdary]

Thank you so much!

[@chinazamekperechimbo1980]

This tutorial is the best I have ever seen for laravel API. I was wondering, what visual studio code extension do you use to automatically pull in newly created controllers to the route file

[@codewithdary]

Thank you so much. kzbin.info/www/bejne/gXK4qZqLq6hoZ5Y

[@piyushjain9229]

thanks sir you helped a lot to understand the basis of api and how to complex things in simple way

[@codewithdary]

Love to help buddy :)

[@umar_adil]

This is a nice work and it helped me to improve my sanctum integration and few shortcuts. I am also listing out all users to list without login by any user how can I prevent that API from public access?

[@codewithdary]

Use a middleware!

[@JLaurel]

You should do a Postman course. That would be great info...

[@codewithdary]

I’ve got a video on my channel where I setup postman

[@TamilKingt]

Thanks for the great tutorial, Can we validate the auth check in validation class, why we need a separate function in controller?, How to validate the type hinted model in form request class?

[@MayankSinghParmar]

Very good video

[@darwinibay2174]

you are a master

[@codewithdary]

Thank you Darwin

[@ahsanjawed9543]

i am beginner in laravel and i want to learn API's in laravel. Should i watch this course or watch you laravel API Course?

[@codewithdary]

I would definitely say both, some things I do in the Laravel API course I don't explain in here.

[@JanLordLuga]

great tutorial. Thank you!

[@codewithdary]

Thank you Jan

[@luisdev7646]

thank you very complete tutorial

[@codewithdary]

You are welcome Luis :)

[@wellingtonchanda4067]

🔥🔥🔥 this is fire

[@codewithdary]

Thank you Wellington!

[@johwel340]

super content. Thanks Dary.

[@codewithdary]

My pleasure John!

[@sithumdasantha3147]

Kudos

[@codewithdary]

Thank you!

[@jdbt7874]

thank you for your great content and detailed explanations, I really appreciate it

[@codewithdary]

My pleasure!

[@robchal7230]

niice video bro, but its too bad you didnt mention about other props from sanctum

[@codewithdary]

I could make a 10 hour video about Sanctum, or pretty much and other tool :)

[@Ancient244]

GREAT EXPLANATION

[@bestepisodes5774]

Task::factory()->times(2)->create(); Error Class "Task" not found. showing this error. Can you help me

[@codewithdary]

Ensure that the Task model file is autoloaded properly by checking your composer.json file. This can be done by running the following command: composer dump-autoload.

[@TheKennyWorld]

1:07:00 Update method

[@dheeraj_kumar_1508]

Thank you very much Sir i saw the video and practice well

[@codewithdary]

Keep it up buddy!

[@dheeraj_kumar_1508]

@@codewithdary Sure Sir, thank you Sir

[@giodafirst0]

Great tutorial ! Tx!

[@codewithdary]

Thank you, Serge!

[@arazibrahim7416]

Thanks a lot...

[@codewithdary]

Thank you for watching :)

[@aouraghmohammedelamine5744]

thank you Dary for the tutorial it's very rich with informations and best practices , can you please update the repo ?

[@codewithdary]

Thank you so much. What is missing in the repo?

[@aisalen]

Thanks for this great and clear tutorial! Hoping that you can continue creating tutorial for vue or react consuming the api from this.

[@codewithdary]

Definitely something I'll be doing very soon!

[@tukurhamid]

@@codewithdary can't wait 👍

[@davidadewale8466]

Thanks for the tutorial… I’m stucked here. I kept getting error (Error, class “Task” not found) when I tried to use tinker to generate task . Any assistance will be welcomed. Thanks

[@codewithdary]

This happens sometimes when composer has not loaded the classes correctly. The simplest solution is to add the entire path to it such as App\Models\Task

[@RaV86pl]

Great video again, love Your work. Just a question, can we use policies for sanctum API? feels like it should work and in this example it fits perfectly

[@codewithdary]

Yes you can!

[@codewithdary]

The reason why I didn't use policies is mainly because I nevr covered it in a separate video

[@stuarttodd1875]

This is great, thank you

[@codewithdary]

Thank you for watching Stuart!

[@user-ii6yg3lf1v]

how you used auth->attempt() to verify the credentials and in the same time generate a token, that's not a good practise because the auth()->attempt apply the seesion based authentication so the server is created a session on it after using this method

[@codewithdary]

The auth()->attempt() method is used to verify the credentials and log in the user. However, it does not generate a token directly. Instead, after successfully logging in the user, the code creates a token using $user->createToken('API Token')->plainTextToken.

[@user-ii6yg3lf1v]

​@@codewithdary Yes, I mean after a successful attempt to log in user using the auth()->attempt() method the server creates a session for this user and sends it back to the browser, and no benefits from using the token-based authentication because as I know that among need for the token is to make the server more free in memory

[@autoge13]

Why don't you use auth()->user() to get the current user instead of User::where('email',.....) after the Attempt? If the Attempt succeeds doesn't it mean that the auth() helper can be used as well?

[@codewithdary]

Looking at the code right now I do believe that you are right. The code I added isn’t necessarily wrong, but using auth()→user() is cleaner. use auth()->user(). If you need to retrieve user information based on a given condition, use User::where().

[@hache_raw]

Thanks.

[@codewithdary]

You're welcome!!

[@moali9944]

Great video, Dary.

[@codewithdary]

Glad you think so Mo!

[@firassebai8592]

Thanks for clearing me sanctum because many ppls says its for beginners .. Else i ve another question am starting deving some apps with laravel without using any packages like sanctum or passport for auth, are they not secured 🤔 do tou recommend to use sanctum .. already setup auth for *not small projects thank you

[@codewithdary]

Glad I could help! Well I can’t say whether a custom auth system is secured or not without seeing it but you have to keep a lot of factors into consideration which are happening behind the scenes. I’m personally a fan of sanctum because of its simplicity, so I would recommend it (or Laravel passport for oauth2.0)

[@sundayolaoye713]

HI Dary, I don't know what I did wrong in the 32min here 'password' => ['required', 'confirmed', Rules\Password::defaults()]. it was highlighting Rules\Password and was saying undefined type, I wouldn't know what I supposed to put in the name space on top.

[@patrikhalgas7719]

Hi, try 'password' => ['required', 'confirmed', Password::defaults()] and use Illuminate\Validation\Rules\Password;

[@sundayolaoye713]

@@patrikhalgas7719, thanks Dary as explained to me in another course.

[@vilhemleshi7222]

I faced the same issue.

[@majdaleid6648]

Thank you, I think using the null coalescing operator '??' in show method will simplify the code further, like this: private function isNotAuthorized($task) { if (Auth::user()->id !== $task->user_id) { return $this->error('', 'You are not authorized to make this request', 403); } return null; } public function show(Task $task) { return $this->isNotAuthorized($task) ?? new TasksResource($task); }

[@codewithdary]

You are definitely right! :)

[@user-fy7yn2fh9m]

Great job Dary. But I forgot how to deal with this ""The PATCH method is not supported for this route. Supported methods: GET, HEAD, POST."," resource controller can not be used?

[@codewithdary]

What is the route?

[@user-fy7yn2fh9m]

@@codewithdary timing 1:09:26 error "message": "The PATCH method is not supported for route api/tasks. Supported methods: GET, HEAD, POST.", "exception": "Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException", Please advise how to fix this error

[@codewithdary]

@@user-fy7yn2fh9m The patch method is used to update a resource, but you are trying to perform it on either retrieving or persisting a post. The endpoint for patch should be api/tasks/{id}

[@user-fy7yn2fh9m]

@@codewithdary thanks for the help. Inattentively looked, everything worked.

[@aakashdesai149]

After using the validator Request in the parameter, we don't need to use the validated function in the function, it will validate automatically.

[@fahvygaming1118]

If you add an extra input that isn't in the rule, it will get passed into the data

[@__Cypher]

@@fahvygaming1118 If we add an extra input then we can add it to rules as well or we can add it as nullable

[@tricioandrade]

Hello teacher, how are you? I'm having problems with the Class Validator while trying to register a user: { "message": "Method Illuminate\\Validation\\Validator::validateAndrade does not exist." } I've searched on stackoverflow and other forums but I haven't had success. I tried to include the Class Validator, but I didn't succeed either. And again, thank you for taking your precious time to create this instructional-rich video.

[@codewithdary]

Have you added validateAndrade in your use statement? Other than that I have no idea and it doesn't seem like an error related to this tutorial.

[@codewithdary]

I'm also doing good! What about yourself? :)

[@ladirevolutionist]

I got the same error. But I find that I typo in AuthController.php. incorrect : $request->validate($request->all()); correct : $request->validated($request->all()); I hope this will help you from Japan. And super thank you, Dary!!

[@tricioandrade]

Thanks ladirevolutionist. I'll try that

[@tricioandrade]

@@ladirevolutionist thank you.

[@mohammadeshaghi2637]

thanks

[@codewithdary]

No problem

[@user-if8ub3vd9g]

Thnx for the video, how can we implement roles and permission

[@codewithdary]

Laravel Spatie Roles and Permissions :)

[@tito-ace]

wow! very clear tutorial..how to be you sir 😁

[@codewithdary]

Nothing special, just a lot of practice. Thank you :)

[@seanmaruelcomingues6257]

Thank you.

[@codewithdary]

My pleasure Sean!

[@tukurhamid]

Thank you sir. This tutorial is superb 👌👌👌

[@codewithdary]

Thank you for watching Tukur, appreciate it

[@mahdipaykoub9951]

It was great, but one question When we don't use the api of Laravel, the functionality of the register and login functions are implemented by Laravel. Is there no such api here?

[@Psychobellic]

Great content, Dary. Thank you!! Just wanted to add that I had some issues on the authentication, always getting Unauthorized back, even using traits.. But my issue was that I was using Breeze as starter kit, so I had to start a new project to make it work properly. It does now, I just don't understand why we create a token on register and a new one on login? Can you explain, please?

[@codewithdary]

Laravel Breeze doesn't use Sanctum! You need to look into that to get more clarification :)

[@AlexGower]

Laravel breeze -api uses sanctum all you need to do is get csrf before try to login etc and then it will refresh the csrf with every authenticated request