Laravel API Crash Course With Sanctum | Laravel Sanctum Full Tutorial | How to Build Laravel API

[@codewithdary]

If you're looking to level up your Laravel skills? My new course "Mastering Laravel 10 Query Builder, Eloquent & Relationships" is the perfect opportunity: www.udemy.com/course/mastering-laravel-10-query-builder-eloquent-relationships/?referralCode=C784C3DB5B8925207FCB

[@devopsdevelopoptions409]

and i want to say that the video was perfect for me as a beginner in apis

[@AstreonOfficial]

When declaring resource routes that will be consumed by APIs, you will commonly want to exclude routes that present HTML templates such as create and edit. For convenience, you may use the apiResource method to automatically exclude these two routes. Like this: Route::apiResource('tasks', TasksController::class);

[@codewithdary]

Wait I didn’t do that in this tutorial! I’m ashamed! you are completely right.

[@sv2109]

Man, you have a real talent for explaining complex topics so that they seem very simple

[@codewithdary]

Thank you so much, Volodymyr!

[@Quota-4]

Your tutorials are way more transparent than the videos on Laracast

[@codewithdary]

Thank you so much. Laracasts is incredible too :D

[@adeoluayobami6810]

I wanted to also say this

[@soliuabdulkadir4488]

Pls I am stuck while following the tutorial. I couldn't get the tinker to create the Tasks as it is returning "Error Class Task not found"

[@nigmadude]

@@soliuabdulkadir4488 just specify the path of your Task class , like \App\Models\Task

[@naiveneger39]

​@@codewithdary hello for the tasks how can we show tasks belonging only to logged in user

[@joshmakar9161]

This crash course not only explained the basics of using Sanctum but also included a ton of valuable information about configuring APIs, using ResourceControllers, implementing custom requests, and so much more. Very well done!

[@codewithdary]

Thank you so much, I appreciate your kind words Josh!

[@jackreacher8632]

Before I even finish this video let me say that your are an amazing professor. That tutorial is so fluent , explaining patiently concepts I was hardly trying to understand. Thank you very much from Burkina Faso.

[@AbderrahmanFodili]

you are a lifesavour . I loved you content when I was still learning a year ago and I am even more thankful that you posted this video now that I got a job and I am asked to make an API. your methods are light years ahead of my put together garbage API . thank you good sir

[@codewithdary]

Thank you so much Abderraham! Tried my best making it easy for you. I've also got a video where I create a property listing API, might be useful for you too :)

[@MrWorkman2010]

What!! I have successfully gone through this entire tutorial. Was very helpful.

[@madie2659]

Best Laravel video with great explanations I have seen on KZbin.. Thank you sooo much for this video

[@meetwithchuks8861]

I love your tutorials; clear and in-depth. This is the latest and the best. Many thanks.

[@codewithdary]

Thank you so much Chuks!

[@knockedbull7087]

Very well explained with details, common mistakes and coding things step by step so we are not saturated. One of the best teacher i've watched so far. Thanks a lot for this tutorial

[@codewithdary]

Wow, your comment just made my day. Thank you so much :)

[@cryswerton-silva]

Best video on Laravel Sanctum ever!!

[@codewithdary]

Wow, thank you

[@LuiBorosu]

If there is anything that i want to complain about in this tutorial, you need to show us every namespace that you used inside your controller. not all of us who are trying to learn laravel knows how to automatically add them whenever you used a class that isnt inside of the controller originally. It confused the heck out of me. 6/10. man do what i just said and it will be instant 9/10. cuz its such bummer to suddenly getting an error when i literally do everything you did step by step.

[@codewithdary]

Namespaces are something you should learn in PHP, and not so much in Laravel. Let alone starting with Laravel Sanctum, which you shouldn't learn if you have no idea how namespaces work. I understand your concern, but I can't explain every single step over and over again, overwise people will start complaining about me repeating myself :) A part of being a developer is also making decisions on your own. You shouldn't just follow the tutor and expect to be a developer after a certain amount of hours.

[@sb-dor]

thank you so much man, I've been working as a full-stack developer for a long time, and i didn't know some of that stuffs in laravel. push forward bro. greate video!

[@codewithdary]

Wow, I'm happy that I could help!!

[@PacificDev]

Great video! Thanks 👊 When validating a form request you actually don't need to call request->all() inside the validated() method. It doesn't need it. The validated method returns an array with the validated fields.

[@codewithdary]

That is correct! Don't know why I did that....

[@josephofodum7895]

This is my first video on laravel and it is very enlightening.

[@edi_gun_awan]

Thank you. I retired from JS framework hell from now on.

[@codewithdary]

I feel you! Haha :)

[@FelixLuk-g9l]

Hi Dary, very good video. Just one small suggestion: pause for a second or two before you switch screen or program, so that your viewers get a chance to pause. Also, there is a small problem with the cli when the screen is paused, as YT's control overlaps on the last line, which happens to be what you are typing. So maybe using a ssh client to connect locally?

[@codewithdary]

Thank you for the feedback, it is truly appreciated! I will definitely implement your feedback.

[@HarshSharma-xp7uf]

Fantastic Tutorial Dary. I am a newbie to laravel and your videos are just fantastic. Thank you

[@codewithdary]

Thank you so much Harsh, truly appreciate your kind words.

[@EddieMao]

Wow, wonderful tutorial, Dary. Thank you so much.

[@codewithdary]

Happy to help! :)

[@zoltanfodor1605]

It was a good-quality video. Thanks a lot, Dary!

[@codewithdary]

Glad you liked it, Zoltan!

[@XFX0629]

Amazing tutorial. Extremely clear and useful. Thanks a lot!

[@codewithdary]

Glad you enjoyed it!

[@afolabiabiodun7582]

You're too good. You made it easy

[@codewithdary]

Awesome

[@w155uu]

hope you complete this tutorial by adding an extra section about token abilities and authorization. thanks

[@codewithdary]

The tutorial is very complete, what you want is additions :)

[@mr_farukhaleem]

Thank you @codewithdary . Your video tutorial is very helpful and easy to learn. Which packages or feature of a Laravel should we learn more to make a complete app for backend API. like like for sending emails, que jobs, uploading files..

[@codewithdary]

You shouldn't really learn packages, because they usually have good docs. You need to level up your Laravel skills to learn APIs!

[@piyushjain9229]

thanks sir you helped a lot to understand the basis of api and how to complex things in simple way

[@codewithdary]

Love to help buddy :)

[@tamilselvan-jas]

Thanks for the great tutorial, Can we validate the auth check in validation class, why we need a separate function in controller?, How to validate the type hinted model in form request class?

[@codewithdary]

YOU CAN FIND ME ON TWO NEW PLATFORMS. 🔥TikTok: www.tiktok.com/@codewithdary 🔥Blog: blog.codewithdary.com/ AND ON 🔥Instagram: instagram.com/codewithdary/ 🔥Twitter: twitter.com/codewithdary

[@md.ruhulamin7963]

Thank you sir, this is very clear, simple and informative. One request, would you please add how to handle image in API. Thank you.

[@codewithdary]

Thank you for watching Ruhul. It needs to happen in the same way as "not with APIs"!

[@mohammadhosseinmoradi2021]

It was very very useful. Thanks a lot to Mr. dary ❤for creating tutorial contents. Your tutorials are the best! I'm from iran country. I like next tutorial was be about the role based API and custom middleware. I look forward to your next tutorials.

[@codewithdary]

Thank you so much Mohammad, I try to do my best for you :)

[@ThaRealIansanity]

Small mistake in LoginUserRequest ? I think you referred to the 'email' rule as meaning it comes from the 'email' column. Actually validates that it is a properly formed email address. Also what is the need for 'string' rule if we are making sure it is a valid email? And for the password, Password::default() used in the register request rules has min:8 by default where we used min:6 in our login request. I just used Password::default() in both requests to make sure the rules match. Otherwise excellent course so far. I'm learning a lot and looking forward to moving to your authentication videos next

[@codewithdary]

Thank you Ian! I'm here to learn too ;)

[@umar_adil]

This is a nice work and it helped me to improve my sanctum integration and few shortcuts. I am also listing out all users to list without login by any user how can I prevent that API from public access?

[@codewithdary]

Use a middleware!

[@mohamedadel936]

Thank you Dary 😍 I learned a lot from this video ❤

[@codewithdary]

I'm so happy that you dod Mohamed! :)

[@belaouraabdelwahab]

Awesome video thanks 👍 Please add more videos about API other methods like email confirmation, password reset, OTP confirmation for mobile .... Thanks again for the tutorial

[@codewithdary]

Sounds interesting! But the code will pretty much be the same as I’ve build in my other tutorials!

[@robinncode]

Thank you very much. Your Tutorial was very clear and easy to learn. You are awesome!!!

[@codewithdary]

Thank you so much for your kind words, it's truly appreciated!

[@n3volja]

I loved this! Thank you for making this.

[@codewithdary]

Thank you for your kind words!!

[@wikichua3577]

i love all your tutorials. hope to learn more from your up coming tutorial, appreciated if there is laravel livewire and alpinejs tutorial.

[@codewithdary]

Great suggestion!

[@chinazamekperechimbo1980]

This tutorial is the best I have ever seen for laravel API. I was wondering, what visual studio code extension do you use to automatically pull in newly created controllers to the route file

[@codewithdary]

Thank you so much. kzbin.info/www/bejne/gXK4qZqLq6hoZ5Y

[@laravelug]

Thnx for the video, how can we implement roles and permission

[@codewithdary]

Laravel Spatie Roles and Permissions :)

[@ahmedsabri6275]

this was so amazing and helpful thanks for this tutorial

[@codewithdary]

Thank you so much Ahmed!

[@mahdipaykoub9951]

It was great, but one question When we don't use the api of Laravel, the functionality of the register and login functions are implemented by Laravel. Is there no such api here?

[@robo64257]

This is a fantastic video tutorial and helped me a lot. thanks. But how can I create a password reset functionality through the API?

[@7Janiel]

One thing to ask: why did you not create form requests for all the Task functions ?

[@NabeelPs-u6h]

hi sir, while using command line please make sure to write at top or middle , on bottom it gets hide byy youtube texts.

[@АлександрФефилов-х4т]

Great job Dary. But I forgot how to deal with this ""The PATCH method is not supported for this route. Supported methods: GET, HEAD, POST."," resource controller can not be used?

[@codewithdary]

What is the route?

[@АлександрФефилов-х4т]

@@codewithdary timing 1:09:26 error "message": "The PATCH method is not supported for route api/tasks. Supported methods: GET, HEAD, POST.", "exception": "Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException", Please advise how to fix this error

[@codewithdary]

@@АлександрФефилов-х4т The patch method is used to update a resource, but you are trying to perform it on either retrieving or persisting a post. The endpoint for patch should be api/tasks/{id}

[@АлександрФефилов-х4т]

@@codewithdary thanks for the help. Inattentively looked, everything worked.

[@kimelironald4451]

Good staff,,,You are really doing something Amazing. API is my favorite. Make a simple mysql cli tutorial, very short is enough

[@codewithdary]

Thank you Kimeli! Not sure if I be doing that any time soon.

[@kimelironald4451]

@@codewithdary No worry.Thanks

[@miyirbek6821]

Thanks a lot bro. You helped me so much

[@codewithdary]

I'm happy that I could help!

[@mahamedassoul6960]

your tutorial was very very helpful, thank you so much 👏

[@codewithdary]

Thank you for watching Mahamed!

[@JLaurel]

You should do a Postman course. That would be great info...

[@codewithdary]

I’ve got a video on my channel where I setup postman

[@abrhamb2952]

Best Course on Sanctum Thanks a lot , Do you have Laravel Fortify Course ?

[@codewithdary]

Thank you so much Abrham! I unfortunately don't :(

[@LeonelLopezBorbon]

That's magnific your tutorial more clear understand! Thank very much! TOP!

[@codewithdary]

Glad it helped Leonel!

[@aouraghmohammedelamine5744]

thank you Dary for the tutorial it's very rich with informations and best practices , can you please update the repo ?

[@codewithdary]

Thank you so much. What is missing in the repo?

[@ahsanjawed9543]

i am beginner in laravel and i want to learn API's in laravel. Should i watch this course or watch you laravel API Course?

[@codewithdary]

I would definitely say both, some things I do in the Laravel API course I don't explain in here.

[@kavehsarkhanlou8608]

You are wrapping your credentials array in an extra array. Remove the extra array wrap in line 21 at 37:58

[@nishaladhin7357]

This actually solved my error! Thanks!

[@cjlacaste28]

thank you.

[@davidadewale8466]

Thanks for the tutorial… I’m stucked here. I kept getting error (Error, class “Task” not found) when I tried to use tinker to generate task . Any assistance will be welcomed. Thanks

[@codewithdary]

This happens sometimes when composer has not loaded the classes correctly. The simplest solution is to add the entire path to it such as App\Models\Task

[@dheeraj_kumar_1508]

Thank you very much Sir i saw the video and practice well

[@codewithdary]

Keep it up buddy!

[@dheeraj_kumar_1508]

@@codewithdary Sure Sir, thank you Sir

[@RaV86pl]

Great video again, love Your work. Just a question, can we use policies for sanctum API? feels like it should work and in this example it fits perfectly

[@codewithdary]

Yes you can!

[@codewithdary]

The reason why I didn't use policies is mainly because I nevr covered it in a separate video

[@EljayPucan]

Question: Why did you use Trait instead of Laravel resources for API?

[@codewithdary]

If I’m correct, because It has been a while, I used the trait to determine the type of message that should be returned and the API resource to specify how the data should be returned.

[@EljayPucan]

@codewithdary I guess it needs version 2 of this awesome tutorial 🤗

[@firassebai8592]

Thanks for clearing me sanctum because many ppls says its for beginners .. Else i ve another question am starting deving some apps with laravel without using any packages like sanctum or passport for auth, are they not secured 🤔 do tou recommend to use sanctum .. already setup auth for *not small projects thank you

[@codewithdary]

Glad I could help! Well I can’t say whether a custom auth system is secured or not without seeing it but you have to keep a lot of factors into consideration which are happening behind the scenes. I’m personally a fan of sanctum because of its simplicity, so I would recommend it (or Laravel passport for oauth2.0)

[@feedgaming8374]

tysm, you are so good at explaining subjects like this, appreciate your efforts,

[@codewithdary]

You're very welcome!

[@luisdev7646]

thank you very complete tutorial

[@codewithdary]

You are welcome Luis :)

[@ElieShamout]

Thank you very much, How i can check if Task is exists or no using FunctionName(Task $task)

[@codewithdary]

I recommend you to look into the findorFail method that Laravel offers :)

[@autoge13]

Why don't you use auth()->user() to get the current user instead of User::where('email',.....) after the Attempt? If the Attempt succeeds doesn't it mean that the auth() helper can be used as well?

[@codewithdary]

Looking at the code right now I do believe that you are right. The code I added isn’t necessarily wrong, but using auth()→user() is cleaner. use auth()->user(). If you need to retrieve user information based on a given condition, use User::where().

[@ABEDALLAHGOZAH]

how you used auth->attempt() to verify the credentials and in the same time generate a token, that's not a good practise because the auth()->attempt apply the seesion based authentication so the server is created a session on it after using this method

[@codewithdary]

The auth()->attempt() method is used to verify the credentials and log in the user. However, it does not generate a token directly. Instead, after successfully logging in the user, the code creates a token using $user->createToken('API Token')->plainTextToken.

[@ABEDALLAHGOZAH]

​@@codewithdary Yes, I mean after a successful attempt to log in user using the auth()->attempt() method the server creates a session for this user and sends it back to the browser, and no benefits from using the token-based authentication because as I know that among need for the token is to make the server more free in memory

[@Muhammed-nani964]

Noice video Dary we need more videos about auth with api for SPA front-end, and I have a question about authentication for a project. I'm confused about whether to use cookie or token-based API authentication. Which one do you suggest and which one is more secure? especially for SPA front-end

[@codewithdary]

Hi Muhammed! It's difficult to judge without knowing the project's background. However, token-based authentication is useful for storing data on the client-side, while cookie-based authentication is suitable for storing less secure data, as cookies can be vulnerable.

[@charbel12334]

getting a jumpscare with the start of each section😂. Very useful tutorial! Can you please make the frontend of this application with react js

[@codewithdary]

I have to keep my students awake you know :)

[@SR-hp4tp]

Amazing tutorial !

[@codewithdary]

Thank you!

[@kh1amirhamza]

Wonderful Tutorial!

[@codewithdary]

Thank you! Cheers!

[@Facegramdin]

After using the validator Request in the parameter, we don't need to use the validated function in the function, it will validate automatically.

[@fahvygaming1118]

If you add an extra input that isn't in the rule, it will get passed into the data

[@__Cypher]

@@fahvygaming1118 If we add an extra input then we can add it to rules as well or we can add it as nullable

[@TheKennyWorld]

1:07:00 Update method

[@aisalen]

Thanks for this great and clear tutorial! Hoping that you can continue creating tutorial for vue or react consuming the api from this.

[@codewithdary]

Definitely something I'll be doing very soon!

[@tukurhamid]

@@codewithdary can't wait 👍

[@jtech04]

Awesome dude, for covering advance topic😁😁

[@codewithdary]

Thank you so much :)

[@gp6723]

Great one!

[@codewithdary]

Thank you so much :)

[@7Janiel]

Very good tutorial sir

[@hichamelbachari2655]

what an amazing video!

[@codewithdary]

Thank you so much!

[@tricioandrade]

Hello teacher, how are you? I'm having problems with the Class Validator while trying to register a user: { "message": "Method Illuminate\\Validation\\Validator::validateAndrade does not exist." } I've searched on stackoverflow and other forums but I haven't had success. I tried to include the Class Validator, but I didn't succeed either. And again, thank you for taking your precious time to create this instructional-rich video.

[@codewithdary]

Have you added validateAndrade in your use statement? Other than that I have no idea and it doesn't seem like an error related to this tutorial.

[@codewithdary]

I'm also doing good! What about yourself? :)

[@ladirevolutionist]

I got the same error. But I find that I typo in AuthController.php. incorrect : $request->validate($request->all()); correct : $request->validated($request->all()); I hope this will help you from Japan. And super thank you, Dary!!

[@tricioandrade]

Thanks ladirevolutionist. I'll try that

[@tricioandrade]

@@ladirevolutionist thank you.

[@ulaskorpe]

thank you for this tutorial

[@codewithdary]

You're welcome 😊

[@tond9997]

I can't run schedulte auto expires token in my test project . Can you explaining more and check and deepdown with topic expires datetime how it real work right ? If your explain , Ser ' I appreciate that.

[@Ancient244]

GREAT EXPLANATION

[@madie2659]

Please create video on sanctum multi auth as well

[@sundayolaoye713]

Hi Dary, thanks for the good works. I am using VS code on windows, when you wanted to test your login in the 18mins of the video you typed laravel_sanctum.test/api/login. please, where is .test from? I have been trying and trying and keep getting errors on my postman? you also said we can use PHP artisan serve, I tried it in Postman it doesn't work?

[@codewithdary]

I’m using Valet, that’s why I’m able to add the .test. If you don’t use Valet you should use 127.0.0.1:8000.

[@chrisngkaixing320]

Nice video! Thank you for your great content, it's clear and easy to understand.

[@codewithdary]

Thank you Chris! Hoped it help you out :)

[@Psychobellic]

Great content, Dary. Thank you!! Just wanted to add that I had some issues on the authentication, always getting Unauthorized back, even using traits.. But my issue was that I was using Breeze as starter kit, so I had to start a new project to make it work properly. It does now, I just don't understand why we create a token on register and a new one on login? Can you explain, please?

[@codewithdary]

Laravel Breeze doesn't use Sanctum! You need to look into that to get more clarification :)

[@AlexGower]

Laravel breeze -api uses sanctum all you need to do is get csrf before try to login etc and then it will refresh the csrf with every authenticated request

[@stuarttodd1875]

This is great, thank you

[@codewithdary]

Thank you for watching Stuart!

[@darwinibay2174]

you are a master

[@codewithdary]

Thank you Darwin

[@JanLordLuga]

great tutorial. Thank you!

[@codewithdary]

Thank you Jan

[@onesentientbeing6311]

"You don't need to dream about Laravel at night" - CWD. Good one🤣👍.

[@codewithdary]

Right? 😂

[@robchal7230]

niice video bro, but its too bad you didnt mention about other props from sanctum

[@codewithdary]

I could make a 10 hour video about Sanctum, or pretty much and other tool :)

[@luisuran4050]

Something that bothers me is that on the update method you are giving the user the chance to update any field. I would instead do "$task->update($request->only(['name', 'description', 'priority']));"

[@codewithdary]

I'm happy you saw that. Honestly don't really have a reason why I used it inside the AuthController and not inside of the TasksController. Just a mistake on my part.

[@arash5094]

i like you tutorials

[@codewithdary]

Thank you so much, Arash

[@alidahud337]

Hi, the expires_at value is still null after setting up the scheduler. As. I can see yours too. Any idea why?

[@binaryfire]

Great video Dary! I have a regular Laravel / Blade app and was thinking of dropping a small SPA into one of my pages. Is it possible to make authenticated API calls from that SPA using Sanctum, even though the user logged in via the normal Blade login page (session auth)? I’d prefer to use Sanctum’s session authentication for security. The SPA is on the same domain as the API.

[@codewithdary]

I don't really see the point of using an API is you want to use it within the same project, unless you want to fetch data to other apps as well. Usually, you create a backend API and use it within a JS Framework.

[@binaryfire]

@@codewithdary So basically, we're replacing one section of a large legacy app with a Vue SPA for better UI/UX. It'll need to consume the API to work. I figure there must be a way to do it since Sanctum supports session auth for SPAs. But I can't find any examples or info. The page with the SPA will be /my-account and the api is at /api. So they're both on the same domain. The API will be used for a mobile app in the future so we'll be creating it anyway. Our Vue dev is an experienced frontend dev and doesn't want to use Inertia.

[@naiveneger39]

​@@binaryfire did you find the solution?

[@johwel340]

super content. Thanks Dary.

[@codewithdary]

My pleasure John!

[@__Cypher]

I have a question Why did you created Token at the time of User registration ?? We are creating a token in login and if a user register then he will definitely going to do login

[@codewithdary]

It's an educational tutorial, I can't just show users to register and end up with the video. Most apps have login/register. It's up to the viewers how they are going to implement it inside their working app :)

[@MrMozkoZrout]

Hey awesome video, I would just like to ask about that isNotAuthorised function that we created. Is there a reason it needs to be private ? And i mean i get that it is the right way but when it was created inside of the controller class shouldn't all other functions in that class be able to use that function ? I ask because i thought i will be able to replace the if statement in the update function and use the function not to have any redundant code but aparently the function update doesn't know the isNotAuthorised function. Why is that ? And if this doesn't work this way, how come the weird Ternary operator thingie could access the function ?

[@codewithdary]

First of all, thank you for your kind words. When I created the TasksController, I intended to use the isNotAuthorized method only within the controller itself and not in other classes. If you want to use the isNotAuthorized method in other classes, I suggest placing it inside the User Model where you can access it through auth()->user()->isNotAuthorized in any controller. Regarding your comment about the update method not knowing the isNotAuthorized function, I'm not sure what you mean. Could you please clarify?

[@MrMozkoZrout]

@@codewithdary Oh hello, thank you for your quick answer. You are great. Oh I am sorry I wrote that comment at like 4 am and o was confused. I already figured it out. I simply forgot that I have to use $this-> in front of the function in order to use this. And after I did I forgot that I also have to return the output of the function so I thought the update controller is just ignoring it. It works now when I put it into a classic if statement there. I never intended to use it in another class, sorry for the confusion. Now I am just thinking how to change the function so it doesn't need to be called twice. Once for the if statement and once to return the error.

[@phpisdead]

please make wideo about Passport too

[@codewithdary]

I have one right here: kzbin.info/www/bejne/r2atoKWEgsx3aqM

[@SabbirAhmed-nx2ve]

thanks i have olve the issues

[@codewithdary]

Love to hear that :)

[@jdbt7874]

thank you for your great content and detailed explanations, I really appreciate it

[@codewithdary]

My pleasure!

[@MayankSinghParmar]

Very good video

[@tukurhamid]

Thank you sir. This tutorial is superb 👌👌👌

[@codewithdary]

Thank you for watching Tukur, appreciate it