Getting started with Laravel Passport and OAuth2

[@aschmelyun]

If you'd like to view the source code featured in this video, you can check it out here: github.com/aschmelyun/video-auth-laravel-passport Also I'm using a new style of recording and editing in this video where I talked while recording, instead of doing them separately like my previous videos. If you noticed a difference and did (or did not) like it compared to my previous videos, please let me know below!

[@kennethramos2795]

Greate tutorial, I was able to learn the concept behind this and how to integrate laravel/passport to my api. Thank you so much for this. Hoping to find more useful tutorial from you. God bless!

[@Samuel.Mwangi]

Thanks Andrew for a great video as always. As a sidenote, am loving your updated thumbnail style (Legend has it you have updated even past videos with this new style)

[@aschmelyun]

Thanks, I'm glad you're liking the new style!

[@rjee6511]

Great help for Laravel passport package usage, Thanks.👍

[@Nageswararao93]

Thank you so much for the detailed explanation

[@moreoverid1722]

Thank you very much for this video!

[@srikanthsanjeev]

Thanks for detailed explanation

[@aschmelyun]

I'm glad you liked it!

[@dev_jeongdaeri]

Thanks for amazing content!!!!👍

[@PrakashNayak-vg3vc]

Hi @andrew , It was a nice video related to Passport and Oath2. As passport is not supporting for Multi-tenant application. Is there any video for customizing the passport class and add some custom claim to the the passport access token.

[@GazmendSahiti-r9n]

How does this work while having a SPA? Right now I have a SPA and I want 3rd parties to use my api too, can't figure it out.

[@googlemap3641]

hi, I have an error with Authorizing A Client ( "hint": "Cannot decrypt the authorization code"). I searched for this error on google but it is not clear and I can't understand it. Thanks!

[@devarm]

Hey Andrew, what if we are using an API instead of having a client? Will it be the same flow?

[@mrarmani2079]

THis example if the passport used in the same system. How about if they are in the different system?

[@madhand1472]

hi I am using passport oauth2 in lumen I got error Authorization request was not present in the session.

[@delvinnj7941]

Thank you, and how to get the details for the domain that is used in our API

[@ajisurya2818]

can make 1 token oauth api to use the other api in laravel passport?

[@adics]

Great Explanation.. But how can I get the refresh token without sending the client secret (I'm using PKCE)? Can anyone explain it to me?

[@jtech04]

Which IDE/editor you are using? and it's settings? :) please share

[@fatima-cf1bj]

great channel🤩🤩

[@shashikanthd3294]

Which dev tool did you use in this video?

[@uweopfern]

Hi, Andrew thank you so much for this, I am implementing the same thing, but I got one blocker, if a user does not verify their emails, still that endpoint of authorize will be consumed regardless of user email verification, any idea on how to check email verification before issuing that code

[@SEOng-gs7lj]

Must a client belong to a user? why did passport create 2 clients with user_id == null? Can those 2 clients be used?

[@joalbertylosorio1895]

How do i implement this with a frontend built

[@amitleuva8739]

I am receiving 'Unauthenticated ' message when trying to access data using access-token

[@SyofyanZuhad-q3h]

is the scope on passport same with access permission for the user?

[@nguyennhat8284]

how can i logout, reset password...

[@AnilBaniyaNep]

hi Andrew Schmelyun, thanks for the video. Whats the flow to get an authorization code for mobile application? Should the mobile app user should redirect to the browser for authentication and follow the same process as in web or there is another process for mobile application?

[@jacktapanut876]

How to create your dashboard UI? Please share more your clip.

[@FullMe7alJacke7]

How would you go about making this work for a separated front end that's following a micro-service architecture? I have Project #1: Laravel Back End and Project #2: VueJS Front End What's the correct way to continue? A) Create a dedicated middleman route to hit externally, which hits the client creation route internally. B) Redirect To a Client Management page inside of the Backend project.

[@Imagine51204]

Hi, I have same scenario did you get the solution ?

[@subhadipghorui2216]

How to use client id and client_secret in the frontend? cause they are needed for authorization API, so somebody can see in the frontend. So how to use it securely? Please reply. I am using the Oauth2 passport library in laravel and frontend angular.

[@Boris2811ust]

OAuth authors recommend to use PKCE flow in this case.

[@MrMatni45]

hi...im new to laravel passport...my project is multipage app...how should i handle for refresh token??do i have to check token expiry on each request??

[@mohammedrizwan8123]

Phostorm

[@chengchengchengchen4857]

Why I got null, when I trying “dd($request->user()->clients)” that I created a Passport Client after?

[@franzkafka9734]

how did you fix it?

[@Hann0T]

@@franzkafka9734 run the migration

[@franzkafka9734]

@@Hann0T thx

[@accountdua9375]

@@franzkafka9734 How????????

[@MisterCuriusController]

can I use sanctum and passport at the same time?

[@aschmelyun]

Yes, you definitely can. They both serve kind of separate purposes though. If you want to just authenticate some users to your application and be able to provide them an auth token, I'd reach for Sanctum.

[@natdotk]

how to connect keycloak.

[@nikolicvladimir]

Who is My Client? Logged in User?

[@dfordemo981]

i think i have listened your voice somewhere ?? may be in the "Windows Narrator", the exactly the same voice as you, I came to your video from the laracast series and channels

[@jastan3519]

is it brad? 🤣

[@kornflakesss]

is anyone else getting Undefined method 'routesAreCached' ? You have any idea what that is?

[@blueice1364]

I'm new to laravel, and I'm also getting this error, haven't figured out any solution yet. :(

[@jastan3519]

change it to this /** @var CachesRoutes $app */ $app = $this->app; if (!$app->routesAreCached()) { Passport::routes(); }

[@igerardogc]

Which theme are you using in phpstorm?

[@aschmelyun]

I'm using the Material UI plugin, and the Atom One Dark color scheme with it.

[@JenuelDevTutors]

what IDE is this?

[@aschmelyun]

This is PHPStorm, with the Material Theme UI package

[@tommycisternino]

still valid in Laravel 10?

[@nguyentrinhxuanquoc4643]

no

[@SethSetiadha]

Great tutorial. The keyboard sound bit annoying though

[@gethermedel3620]

you miss how to handle the state field

[@fadihijazi8574]

look at this cool tutorial !

[@naungyehtet1231]

Why would we need to make a crud for the OAuth client

[@MAxAMILLIoN757]

I don't think you neeeeed to, but it's probably a good idea so your users can manage permissions for their authorized/connected apps, I think. Otherwise there would be no way for your users to remove permissions

[@augischadiegils.5109]

❤️❤️❤️❤️❤️

[@aspirinemaga]

thank you sir

[@oketafred]

Awesome!

[@Okub]

You sound and talk exactly like Not Just Bikes... what the hell, for a second i thought he does laravel tutorials lol...

[@SKRUBL0RD]

could have at least finished by saying how to return a better unauthorized result instead of a full trace

[@enriqueanzey7845]

Man, too much unnecessary scenes, why do i need to watch the video if u just saying something on the page which i can read on ?

[@ruvinifernandez3039]

Then read the docs and don't watch the video.