Laravel API Crash Course With Sanctum | Laravel Sanctum Full Tutorial | How to Build Laravel API

[@codewithdary]

If you're looking to level up your Laravel skills? My new course "Mastering Laravel 10 Query Builder, Eloquent & Relationships" is the perfect opportunity: www.udemy.com/course/mastering-laravel-10-query-builder-eloquent-relationships/?referralCode=C784C3DB5B8925207FCB

[@devopsdevelopoptions409]

and i want to say that the video was perfect for me as a beginner in apis

[@Quota-4]

Your tutorials are way more transparent than the videos on Laracast

[@codewithdary]

Thank you so much. Laracasts is incredible too :D

[@adeoluayobami6810]

I wanted to also say this

[@soliuabdulkadir4488]

Pls I am stuck while following the tutorial. I couldn't get the tinker to create the Tasks as it is returning "Error Class Task not found"

[@nigmadude]

@@soliuabdulkadir4488 just specify the path of your Task class , like \App\Models\Task

[@naiveneger39]

​@@codewithdary hello for the tasks how can we show tasks belonging only to logged in user

[@sv2109]

Man, you have a real talent for explaining complex topics so that they seem very simple

[@codewithdary]

Thank you so much, Volodymyr!

[@AstreonOfficial]

When declaring resource routes that will be consumed by APIs, you will commonly want to exclude routes that present HTML templates such as create and edit. For convenience, you may use the apiResource method to automatically exclude these two routes. Like this: Route::apiResource('tasks', TasksController::class);

[@codewithdary]

Wait I didn’t do that in this tutorial! I’m ashamed! you are completely right.

[@joshmakar9161]

This crash course not only explained the basics of using Sanctum but also included a ton of valuable information about configuring APIs, using ResourceControllers, implementing custom requests, and so much more. Very well done!

[@codewithdary]

Thank you so much, I appreciate your kind words Josh!

[@meetwithchuks8861]

I love your tutorials; clear and in-depth. This is the latest and the best. Many thanks.

[@codewithdary]

Thank you so much Chuks!

[@jackreacher8632]

Before I even finish this video let me say that your are an amazing professor. That tutorial is so fluent , explaining patiently concepts I was hardly trying to understand. Thank you very much from Burkina Faso.

[@AbderrahmanFodili]

you are a lifesavour . I loved you content when I was still learning a year ago and I am even more thankful that you posted this video now that I got a job and I am asked to make an API. your methods are light years ahead of my put together garbage API . thank you good sir

[@codewithdary]

Thank you so much Abderraham! Tried my best making it easy for you. I've also got a video where I create a property listing API, might be useful for you too :)

[@cryswerton-silva]

Best video on Laravel Sanctum ever!!

[@codewithdary]

Wow, thank you

[@knockedbull7087]

Very well explained with details, common mistakes and coding things step by step so we are not saturated. One of the best teacher i've watched so far. Thanks a lot for this tutorial

[@codewithdary]

Wow, your comment just made my day. Thank you so much :)

[@madie2659]

Best Laravel video with great explanations I have seen on KZbin.. Thank you sooo much for this video

[@MrWorkman2010]

What!! I have successfully gone through this entire tutorial. Was very helpful.

[@LuiBorosu]

If there is anything that i want to complain about in this tutorial, you need to show us every namespace that you used inside your controller. not all of us who are trying to learn laravel knows how to automatically add them whenever you used a class that isnt inside of the controller originally. It confused the heck out of me. 6/10. man do what i just said and it will be instant 9/10. cuz its such bummer to suddenly getting an error when i literally do everything you did step by step.

[@codewithdary]

Namespaces are something you should learn in PHP, and not so much in Laravel. Let alone starting with Laravel Sanctum, which you shouldn't learn if you have no idea how namespaces work. I understand your concern, but I can't explain every single step over and over again, overwise people will start complaining about me repeating myself :) A part of being a developer is also making decisions on your own. You shouldn't just follow the tutor and expect to be a developer after a certain amount of hours.

[@sb-dor]

thank you so much man, I've been working as a full-stack developer for a long time, and i didn't know some of that stuffs in laravel. push forward bro. greate video!

[@codewithdary]

Wow, I'm happy that I could help!!

[@FelixLuk-g9l]

Hi Dary, very good video. Just one small suggestion: pause for a second or two before you switch screen or program, so that your viewers get a chance to pause. Also, there is a small problem with the cli when the screen is paused, as YT's control overlaps on the last line, which happens to be what you are typing. So maybe using a ssh client to connect locally?

[@codewithdary]

Thank you for the feedback, it is truly appreciated! I will definitely implement your feedback.

[@kavehsarkhanlou8608]

You are wrapping your credentials array in an extra array. Remove the extra array wrap in line 21 at 37:58

[@nishaladhin7357]

This actually solved my error! Thanks!

[@cjlacaste28]

thank you.

[@mohammadhosseinmoradi2021]

It was very very useful. Thanks a lot to Mr. dary ❤for creating tutorial contents. Your tutorials are the best! I'm from iran country. I like next tutorial was be about the role based API and custom middleware. I look forward to your next tutorials.

[@codewithdary]

Thank you so much Mohammad, I try to do my best for you :)

[@belaouraabdelwahab]

Awesome video thanks 👍 Please add more videos about API other methods like email confirmation, password reset, OTP confirmation for mobile .... Thanks again for the tutorial

[@codewithdary]

Sounds interesting! But the code will pretty much be the same as I’ve build in my other tutorials!

[@HarshSharma-xp7uf]

Fantastic Tutorial Dary. I am a newbie to laravel and your videos are just fantastic. Thank you

[@codewithdary]

Thank you so much Harsh, truly appreciate your kind words.

[@PacificDev]

Great video! Thanks 👊 When validating a form request you actually don't need to call request->all() inside the validated() method. It doesn't need it. The validated method returns an array with the validated fields.

[@codewithdary]

That is correct! Don't know why I did that....

[@edi_gun_awan]

Thank you. I retired from JS framework hell from now on.

[@codewithdary]

I feel you! Haha :)

[@md.ruhulamin7963]

Thank you sir, this is very clear, simple and informative. One request, would you please add how to handle image in API. Thank you.

[@codewithdary]

Thank you for watching Ruhul. It needs to happen in the same way as "not with APIs"!

[@ThaRealIansanity]

Small mistake in LoginUserRequest ? I think you referred to the 'email' rule as meaning it comes from the 'email' column. Actually validates that it is a properly formed email address. Also what is the need for 'string' rule if we are making sure it is a valid email? And for the password, Password::default() used in the register request rules has min:8 by default where we used min:6 in our login request. I just used Password::default() in both requests to make sure the rules match. Otherwise excellent course so far. I'm learning a lot and looking forward to moving to your authentication videos next

[@codewithdary]

Thank you Ian! I'm here to learn too ;)

[@EddieMao]

Wow, wonderful tutorial, Dary. Thank you so much.

[@codewithdary]

Happy to help! :)

[@XFX0629]

Amazing tutorial. Extremely clear and useful. Thanks a lot!

[@codewithdary]

Glad you enjoyed it!

[@wikichua3577]

i love all your tutorials. hope to learn more from your up coming tutorial, appreciated if there is laravel livewire and alpinejs tutorial.

[@codewithdary]

Great suggestion!

[@zoltanfodor1605]

It was a good-quality video. Thanks a lot, Dary!

[@codewithdary]

Glad you liked it, Zoltan!

[@afolabiabiodun7582]

You're too good. You made it easy

[@codewithdary]

Awesome

[@miyirbek6821]

Thanks a lot bro. You helped me so much

[@codewithdary]

I'm happy that I could help!

[@kimelironald4451]

Good staff,,,You are really doing something Amazing. API is my favorite. Make a simple mysql cli tutorial, very short is enough

[@codewithdary]

Thank you Kimeli! Not sure if I be doing that any time soon.

[@kimelironald4451]

@@codewithdary No worry.Thanks

[@mohamedadel936]

Thank you Dary 😍 I learned a lot from this video ❤

[@codewithdary]

I'm so happy that you dod Mohamed! :)

[@w155uu]

hope you complete this tutorial by adding an extra section about token abilities and authorization. thanks

[@codewithdary]

The tutorial is very complete, what you want is additions :)

[@Muhammed-nani964]

Noice video Dary we need more videos about auth with api for SPA front-end, and I have a question about authentication for a project. I'm confused about whether to use cookie or token-based API authentication. Which one do you suggest and which one is more secure? especially for SPA front-end

[@codewithdary]

Hi Muhammed! It's difficult to judge without knowing the project's background. However, token-based authentication is useful for storing data on the client-side, while cookie-based authentication is suitable for storing less secure data, as cookies can be vulnerable.

[@ahmedsabri6275]

this was so amazing and helpful thanks for this tutorial

[@codewithdary]

Thank you so much Ahmed!

[@chinazamekperechimbo1980]

This tutorial is the best I have ever seen for laravel API. I was wondering, what visual studio code extension do you use to automatically pull in newly created controllers to the route file

[@codewithdary]

Thank you so much. kzbin.info/www/bejne/gXK4qZqLq6hoZ5Y

[@luisuran4050]

Something that bothers me is that on the update method you are giving the user the chance to update any field. I would instead do "$task->update($request->only(['name', 'description', 'priority']));"

[@codewithdary]

I'm happy you saw that. Honestly don't really have a reason why I used it inside the AuthController and not inside of the TasksController. Just a mistake on my part.

[@charbel12334]

getting a jumpscare with the start of each section😂. Very useful tutorial! Can you please make the frontend of this application with react js

[@codewithdary]

I have to keep my students awake you know :)

[@n3volja]

I loved this! Thank you for making this.

[@codewithdary]

Thank you for your kind words!!

[@umar_adil]

This is a nice work and it helped me to improve my sanctum integration and few shortcuts. I am also listing out all users to list without login by any user how can I prevent that API from public access?

[@codewithdary]

Use a middleware!

[@mr_farukhaleem]

Thank you @codewithdary . Your video tutorial is very helpful and easy to learn. Which packages or feature of a Laravel should we learn more to make a complete app for backend API. like like for sending emails, que jobs, uploading files..

[@codewithdary]

You shouldn't really learn packages, because they usually have good docs. You need to level up your Laravel skills to learn APIs!

[@mahamedassoul6960]

your tutorial was very very helpful, thank you so much 👏

[@codewithdary]

Thank you for watching Mahamed!

[@abrhamb2952]

Best Course on Sanctum Thanks a lot , Do you have Laravel Fortify Course ?

[@codewithdary]

Thank you so much Abrham! I unfortunately don't :(

[@TamilKingt]

Thanks for the great tutorial, Can we validate the auth check in validation class, why we need a separate function in controller?, How to validate the type hinted model in form request class?

[@piyushjain9229]

thanks sir you helped a lot to understand the basis of api and how to complex things in simple way

[@codewithdary]

Love to help buddy :)

[@robinncode]

Thank you very much. Your Tutorial was very clear and easy to learn. You are awesome!!!

[@codewithdary]

Thank you so much for your kind words, it's truly appreciated!

[@aouraghmohammedelamine5744]

thank you Dary for the tutorial it's very rich with informations and best practices , can you please update the repo ?

[@codewithdary]

Thank you so much. What is missing in the repo?

[@feedgaming8374]

tysm, you are so good at explaining subjects like this, appreciate your efforts,

[@codewithdary]

You're very welcome!

[@ahsanjawed9543]

i am beginner in laravel and i want to learn API's in laravel. Should i watch this course or watch you laravel API Course?

[@codewithdary]

I would definitely say both, some things I do in the Laravel API course I don't explain in here.

[@JLaurel]

You should do a Postman course. That would be great info...

[@codewithdary]

I’ve got a video on my channel where I setup postman

[@jjplays404]

Awesome dude, for covering advance topic😁😁

[@codewithdary]

Thank you so much :)

[@felixowino3271]

I get an error message in the postman SQLSTATE [42S22] column not found when i test login with a user who is not in the database, what could be the issue?

[@ChBoss-fc2yj]

Hay Felix, try "if(!Auth::attempt($request->only('email','password'))) {" instead of "if(!Auth::attempt([$request->only('email','password')])) {"

[@ThaRealIansanity]

@@ChBoss-fc2yj Thanks I'm always forgetting you can hover or ctrl+click on functions to see their definitions. It already returns an array 🙂

[@mudso]

@@ChBoss-fc2yj GREAT THANKS! you saved my day, is that square bracket a laravel 9 or 10 thing?

[@chrisngkaixing320]

Nice video! Thank you for your great content, it's clear and easy to understand.

[@codewithdary]

Thank you Chris! Hoped it help you out :)

[@LeonelLopezBorbon]

That's magnific your tutorial more clear understand! Thank very much! TOP!

[@codewithdary]

Glad it helped Leonel!

[@RaV86pl]

Great video again, love Your work. Just a question, can we use policies for sanctum API? feels like it should work and in this example it fits perfectly

[@codewithdary]

Yes you can!

[@codewithdary]

The reason why I didn't use policies is mainly because I nevr covered it in a separate video

[@laravelug]

Thnx for the video, how can we implement roles and permission

[@codewithdary]

Laravel Spatie Roles and Permissions :)

[@aisalen]

Thanks for this great and clear tutorial! Hoping that you can continue creating tutorial for vue or react consuming the api from this.

[@codewithdary]

Definitely something I'll be doing very soon!

[@tukurhamid]

@@codewithdary can't wait 👍

[@dheeraj_kumar_1508]

Thank you very much Sir i saw the video and practice well

[@codewithdary]

Keep it up buddy!

[@dheeraj_kumar_1508]

@@codewithdary Sure Sir, thank you Sir

[@aakashdesai149]

After using the validator Request in the parameter, we don't need to use the validated function in the function, it will validate automatically.

[@fahvygaming1118]

If you add an extra input that isn't in the rule, it will get passed into the data

[@__Cypher]

@@fahvygaming1118 If we add an extra input then we can add it to rules as well or we can add it as nullable

[@jdbt7874]

thank you for your great content and detailed explanations, I really appreciate it

[@codewithdary]

My pleasure!

[@ulaskorpe]

thank you for this tutorial

[@codewithdary]

You're welcome 😊

[@josephofodum7895]

This is my first video on laravel and it is very enlightening.

[@onesentientbeing6311]

"You don't need to dream about Laravel at night" - CWD. Good one🤣👍.

[@codewithdary]

Right? 😂

[@robchal7230]

niice video bro, but its too bad you didnt mention about other props from sanctum

[@codewithdary]

I could make a 10 hour video about Sanctum, or pretty much and other tool :)

[@gp6723]

Great one!

[@codewithdary]

Thank you so much :)

[@luisdev7646]

thank you very complete tutorial

[@codewithdary]

You are welcome Luis :)

[@robo64257]

This is a fantastic video tutorial and helped me a lot. thanks. But how can I create a password reset functionality through the API?

[@АлександрФефилов-х4т]

Great job Dary. But I forgot how to deal with this ""The PATCH method is not supported for this route. Supported methods: GET, HEAD, POST."," resource controller can not be used?

[@codewithdary]

What is the route?

[@АлександрФефилов-х4т]

@@codewithdary timing 1:09:26 error "message": "The PATCH method is not supported for route api/tasks. Supported methods: GET, HEAD, POST.", "exception": "Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException", Please advise how to fix this error

[@codewithdary]

@@АлександрФефилов-х4т The patch method is used to update a resource, but you are trying to perform it on either retrieving or persisting a post. The endpoint for patch should be api/tasks/{id}

[@АлександрФефилов-х4т]

@@codewithdary thanks for the help. Inattentively looked, everything worked.

[@davidadewale8466]

Thanks for the tutorial… I’m stucked here. I kept getting error (Error, class “Task” not found) when I tried to use tinker to generate task . Any assistance will be welcomed. Thanks

[@codewithdary]

This happens sometimes when composer has not loaded the classes correctly. The simplest solution is to add the entire path to it such as App\Models\Task

[@kh1amirhamza]

Wonderful Tutorial!

[@codewithdary]

Thank you! Cheers!

[@SR-hp4tp]

Amazing tutorial !

[@codewithdary]

Thank you!

[@firassebai8592]

Thanks for clearing me sanctum because many ppls says its for beginners .. Else i ve another question am starting deving some apps with laravel without using any packages like sanctum or passport for auth, are they not secured 🤔 do tou recommend to use sanctum .. already setup auth for *not small projects thank you

[@codewithdary]

Glad I could help! Well I can’t say whether a custom auth system is secured or not without seeing it but you have to keep a lot of factors into consideration which are happening behind the scenes. I’m personally a fan of sanctum because of its simplicity, so I would recommend it (or Laravel passport for oauth2.0)

[@mahdipaykoub9951]

It was great, but one question When we don't use the api of Laravel, the functionality of the register and login functions are implemented by Laravel. Is there no such api here?

[@7Janiel]

One thing to ask: why did you not create form requests for all the Task functions ?

[@JanLordLuga]

great tutorial. Thank you!

[@codewithdary]

Thank you Jan

[@7Janiel]

Very good tutorial sir

[@arash5094]

i like you tutorials

[@codewithdary]

Thank you so much, Arash

[@ElieShamout]

Thank you very much, How i can check if Task is exists or no using FunctionName(Task $task)

[@codewithdary]

I recommend you to look into the findorFail method that Laravel offers :)

[@phpisdead]

please make wideo about Passport too

[@codewithdary]

I have one right here: kzbin.info/www/bejne/r2atoKWEgsx3aqM

[@stuarttodd1875]

This is great, thank you

[@codewithdary]

Thank you for watching Stuart!

[@ABEDALLAHGOZAH]

how you used auth->attempt() to verify the credentials and in the same time generate a token, that's not a good practise because the auth()->attempt apply the seesion based authentication so the server is created a session on it after using this method

[@codewithdary]

The auth()->attempt() method is used to verify the credentials and log in the user. However, it does not generate a token directly. Instead, after successfully logging in the user, the code creates a token using $user->createToken('API Token')->plainTextToken.

[@ABEDALLAHGOZAH]

​@@codewithdary Yes, I mean after a successful attempt to log in user using the auth()->attempt() method the server creates a session for this user and sends it back to the browser, and no benefits from using the token-based authentication because as I know that among need for the token is to make the server more free in memory

[@autoge13]

Why don't you use auth()->user() to get the current user instead of User::where('email',.....) after the Attempt? If the Attempt succeeds doesn't it mean that the auth() helper can be used as well?

[@codewithdary]

Looking at the code right now I do believe that you are right. The code I added isn’t necessarily wrong, but using auth()→user() is cleaner. use auth()->user(). If you need to retrieve user information based on a given condition, use User::where().

[@johwel340]

super content. Thanks Dary.

[@codewithdary]

My pleasure John!

[@madie2659]

Please create video on sanctum multi auth as well

[@Psychobellic]

Great content, Dary. Thank you!! Just wanted to add that I had some issues on the authentication, always getting Unauthorized back, even using traits.. But my issue was that I was using Breeze as starter kit, so I had to start a new project to make it work properly. It does now, I just don't understand why we create a token on register and a new one on login? Can you explain, please?

[@codewithdary]

Laravel Breeze doesn't use Sanctum! You need to look into that to get more clarification :)

[@AlexGower]

Laravel breeze -api uses sanctum all you need to do is get csrf before try to login etc and then it will refresh the csrf with every authenticated request

[@lyaeusv3828]

very good tuto but man i keep forgetting all ths keyword xd i get them and forget about them the next day overall very very good tuto and if also backed by gpt and bard there is no excuse to say i cannot learn it's all about that alacrity

[@codewithdary]

Thank you so much

[@tricioandrade]

Hello teacher, how are you? I'm having problems with the Class Validator while trying to register a user: { "message": "Method Illuminate\\Validation\\Validator::validateAndrade does not exist." } I've searched on stackoverflow and other forums but I haven't had success. I tried to include the Class Validator, but I didn't succeed either. And again, thank you for taking your precious time to create this instructional-rich video.

[@codewithdary]

Have you added validateAndrade in your use statement? Other than that I have no idea and it doesn't seem like an error related to this tutorial.

[@codewithdary]

I'm also doing good! What about yourself? :)

[@ladirevolutionist]

I got the same error. But I find that I typo in AuthController.php. incorrect : $request->validate($request->all()); correct : $request->validated($request->all()); I hope this will help you from Japan. And super thank you, Dary!!

[@tricioandrade]

Thanks ladirevolutionist. I'll try that

[@tricioandrade]

@@ladirevolutionist thank you.

[@sundayolaoye713]

Hi Dary, thanks for the good works. I am using VS code on windows, when you wanted to test your login in the 18mins of the video you typed laravel_sanctum.test/api/login. please, where is .test from? I have been trying and trying and keep getting errors on my postman? you also said we can use PHP artisan serve, I tried it in Postman it doesn't work?

[@codewithdary]

I’m using Valet, that’s why I’m able to add the .test. If you don’t use Valet you should use 127.0.0.1:8000.

[@arazibrahim7416]

Thanks a lot...

[@codewithdary]

Thank you for watching :)

[@SabbirAhmed-nx2ve]

thanks i have olve the issues

[@codewithdary]

Love to hear that :)

[@__Cypher]

I have a question Why did you created Token at the time of User registration ?? We are creating a token in login and if a user register then he will definitely going to do login

[@codewithdary]

It's an educational tutorial, I can't just show users to register and end up with the video. Most apps have login/register. It's up to the viewers how they are going to implement it inside their working app :)

[@hichamelbachari2655]

what an amazing video!

[@codewithdary]

Thank you so much!

[@binaryfire]

Great video Dary! I have a regular Laravel / Blade app and was thinking of dropping a small SPA into one of my pages. Is it possible to make authenticated API calls from that SPA using Sanctum, even though the user logged in via the normal Blade login page (session auth)? I’d prefer to use Sanctum’s session authentication for security. The SPA is on the same domain as the API.

[@codewithdary]

I don't really see the point of using an API is you want to use it within the same project, unless you want to fetch data to other apps as well. Usually, you create a backend API and use it within a JS Framework.

[@binaryfire]

@@codewithdary So basically, we're replacing one section of a large legacy app with a Vue SPA for better UI/UX. It'll need to consume the API to work. I figure there must be a way to do it since Sanctum supports session auth for SPAs. But I can't find any examples or info. The page with the SPA will be /my-account and the api is at /api. So they're both on the same domain. The API will be used for a mobile app in the future so we'll be creating it anyway. Our Vue dev is an experienced frontend dev and doesn't want to use Inertia.

[@naiveneger39]

​@@binaryfire did you find the solution?

[@EljayPucan]

Question: Why did you use Trait instead of Laravel resources for API?

[@codewithdary]

If I’m correct, because It has been a while, I used the trait to determine the type of message that should be returned and the API resource to specify how the data should be returned.

[@EljayPucan]

@codewithdary I guess it needs version 2 of this awesome tutorial 🤗

[@Ancient244]

GREAT EXPLANATION

[@darwinibay2174]

you are a master

[@codewithdary]

Thank you Darwin

[@tukurhamid]

Thank you sir. This tutorial is superb 👌👌👌

[@codewithdary]

Thank you for watching Tukur, appreciate it

[@giodafirst0]

Great tutorial ! Tx!

[@codewithdary]

Thank you, Serge!

[@fedihammami5141]

if I want to get all tasks in my database or show the details of a specific task and make all users can do this, how can I implement this ??

[@codewithdary]

The functionality has been build in this tutorial, you shouldn't wrap it inside the middleware if everybody should be able to create tasks.

[@TheKennyWorld]

1:07:00 Update method

[@tito-ace]

wow! very clear tutorial..how to be you sir 😁

[@codewithdary]

Nothing special, just a lot of practice. Thank you :)