Laravel API Crash Course With Sanctum | Laravel Sanctum Full Tutorial | How to Build Laravel API

[@codewithdary]

If you're looking to level up your Laravel skills? My new course "Mastering Laravel 10 Query Builder, Eloquent & Relationships" is the perfect opportunity: www.udemy.com/course/mastering-laravel-10-query-builder-eloquent-relationships/?referralCode=C784C3DB5B8925207FCB

[@devopsdevelopoptions409]

and i want to say that the video was perfect for me as a beginner in apis

[@sv2109]

Man, you have a real talent for explaining complex topics so that they seem very simple

[@codewithdary]

Thank you so much, Volodymyr!

[@joshmakar9161]

This crash course not only explained the basics of using Sanctum but also included a ton of valuable information about configuring APIs, using ResourceControllers, implementing custom requests, and so much more. Very well done!

[@codewithdary]

Thank you so much, I appreciate your kind words Josh!

[@AstreonOfficial]

When declaring resource routes that will be consumed by APIs, you will commonly want to exclude routes that present HTML templates such as create and edit. For convenience, you may use the apiResource method to automatically exclude these two routes. Like this: Route::apiResource('tasks', TasksController::class);

[@codewithdary]

Wait I didn’t do that in this tutorial! I’m ashamed! you are completely right.

[@XaviMarquez9080]

Before I even finish this video let me say that your are an amazing professor. That tutorial is so fluent , explaining patiently concepts I was hardly trying to understand. Thank you very much from Burkina Faso.

[@AbderrahmanFodili]

you are a lifesavour . I loved you content when I was still learning a year ago and I am even more thankful that you posted this video now that I got a job and I am asked to make an API. your methods are light years ahead of my put together garbage API . thank you good sir

[@codewithdary]

Thank you so much Abderraham! Tried my best making it easy for you. I've also got a video where I create a property listing API, might be useful for you too :)

[@meetwithchuks8861]

I love your tutorials; clear and in-depth. This is the latest and the best. Many thanks.

[@codewithdary]

Thank you so much Chuks!

[@MrWorkman2010]

What!! I have successfully gone through this entire tutorial. Was very helpful.

[@madie2659]

Best Laravel video with great explanations I have seen on KZbin.. Thank you sooo much for this video

[@cryswerton-silva]

Best video on Laravel Sanctum ever!!

[@codewithdary]

Wow, thank you

[@knockedbull7087]

Very well explained with details, common mistakes and coding things step by step so we are not saturated. One of the best teacher i've watched so far. Thanks a lot for this tutorial

[@codewithdary]

Wow, your comment just made my day. Thank you so much :)

[@sb-dor]

thank you so much man, I've been working as a full-stack developer for a long time, and i didn't know some of that stuffs in laravel. push forward bro. greate video!

[@codewithdary]

Wow, I'm happy that I could help!!

[@n3volja]

I loved this! Thank you for making this.

[@codewithdary]

Thank you for your kind words!!

[@PacificDev]

Great video! Thanks 👊 When validating a form request you actually don't need to call request->all() inside the validated() method. It doesn't need it. The validated method returns an array with the validated fields.

[@codewithdary]

That is correct! Don't know why I did that....

[@codewithdary]

YOU CAN FIND ME ON TWO NEW PLATFORMS. 🔥TikTok: www.tiktok.com/@codewithdary 🔥Blog: blog.codewithdary.com/ AND ON 🔥Instagram: instagram.com/codewithdary/ 🔥Twitter: twitter.com/codewithdary

[@zoltanfodor1605]

It was a good-quality video. Thanks a lot, Dary!

[@codewithdary]

Glad you liked it, Zoltan!

[@EddieMao]

Wow, wonderful tutorial, Dary. Thank you so much.

[@codewithdary]

Happy to help! :)

[@FelixLuk-g9l]

Hi Dary, very good video. Just one small suggestion: pause for a second or two before you switch screen or program, so that your viewers get a chance to pause. Also, there is a small problem with the cli when the screen is paused, as YT's control overlaps on the last line, which happens to be what you are typing. So maybe using a ssh client to connect locally?

[@codewithdary]

Thank you for the feedback, it is truly appreciated! I will definitely implement your feedback.

[@deathlotos522]

39:52 is the first argument of createToken method (i mean name here) somehow credential and affects generated token value or it doesnt matter at all?

[@HarshSharma-xp7uf]

Fantastic Tutorial Dary. I am a newbie to laravel and your videos are just fantastic. Thank you

[@codewithdary]

Thank you so much Harsh, truly appreciate your kind words.

[@kavehsarkhanlou8608]

You are wrapping your credentials array in an extra array. Remove the extra array wrap in line 21 at 37:58

[@nishaladhin7357]

This actually solved my error! Thanks!

[@cjlacaste28]

thank you.

[@mohammadhosseinmoradi2021]

It was very very useful. Thanks a lot to Mr. dary ❤for creating tutorial contents. Your tutorials are the best! I'm from iran country. I like next tutorial was be about the role based API and custom middleware. I look forward to your next tutorials.

[@codewithdary]

Thank you so much Mohammad, I try to do my best for you :)

[@XFX0629]

Amazing tutorial. Extremely clear and useful. Thanks a lot!

[@codewithdary]

Glad you enjoyed it!

[@edi_gun_awan]

Thank you. I retired from JS framework hell from now on.

[@codewithdary]

I feel you! Haha :)

[@afolabiabiodun7582]

You're too good. You made it easy

[@codewithdary]

Awesome

[@muhammadzohaibyunis5872]

Hi @Dary can you kindly guide on routing 17:13 / 1:20:42 it says Target class [AuthController] does not exist. / tried the get too

[@codewithdary]

You most likely haven't added the AuthController inside the use statement (at the top) but tried to call it in the route!

[@LuiBorosu]

If there is anything that i want to complain about in this tutorial, you need to show us every namespace that you used inside your controller. not all of us who are trying to learn laravel knows how to automatically add them whenever you used a class that isnt inside of the controller originally. It confused the heck out of me. 6/10. man do what i just said and it will be instant 9/10. cuz its such bummer to suddenly getting an error when i literally do everything you did step by step.

[@codewithdary]

Namespaces are something you should learn in PHP, and not so much in Laravel. Let alone starting with Laravel Sanctum, which you shouldn't learn if you have no idea how namespaces work. I understand your concern, but I can't explain every single step over and over again, overwise people will start complaining about me repeating myself :) A part of being a developer is also making decisions on your own. You shouldn't just follow the tutor and expect to be a developer after a certain amount of hours.

[@josephofodum7895]

This is my first video on laravel and it is very enlightening.

[@belaouraabdelwahab]

Awesome video thanks 👍 Please add more videos about API other methods like email confirmation, password reset, OTP confirmation for mobile .... Thanks again for the tutorial

[@codewithdary]

Sounds interesting! But the code will pretty much be the same as I’ve build in my other tutorials!

[@LeonelLopezBorbon]

That's magnific your tutorial more clear understand! Thank very much! TOP!

[@codewithdary]

Glad it helped Leonel!

[@md.ruhulamin7963]

Thank you sir, this is very clear, simple and informative. One request, would you please add how to handle image in API. Thank you.

[@codewithdary]

Thank you for watching Ruhul. It needs to happen in the same way as "not with APIs"!

[@robinncode]

Thank you very much. Your Tutorial was very clear and easy to learn. You are awesome!!!

[@codewithdary]

Thank you so much for your kind words, it's truly appreciated!

[@ahmedsabri6275]

this was so amazing and helpful thanks for this tutorial

[@codewithdary]

Thank you so much Ahmed!

[@kimelironald4451]

Good staff,,,You are really doing something Amazing. API is my favorite. Make a simple mysql cli tutorial, very short is enough

[@codewithdary]

Thank you Kimeli! Not sure if I be doing that any time soon.

[@kimelironald4451]

@@codewithdary No worry.Thanks

[@chrisngkaixing320]

Nice video! Thank you for your great content, it's clear and easy to understand.

[@codewithdary]

Thank you Chris! Hoped it help you out :)

[@mohamedadel936]

Thank you Dary 😍 I learned a lot from this video ❤

[@codewithdary]

I'm so happy that you dod Mohamed! :)

[@mr_farukhaleem]

Thank you @codewithdary . Your video tutorial is very helpful and easy to learn. Which packages or feature of a Laravel should we learn more to make a complete app for backend API. like like for sending emails, que jobs, uploading files..

[@codewithdary]

You shouldn't really learn packages, because they usually have good docs. You need to level up your Laravel skills to learn APIs!

[@wikichua3577]

i love all your tutorials. hope to learn more from your up coming tutorial, appreciated if there is laravel livewire and alpinejs tutorial.

[@codewithdary]

Great suggestion!

[@piyushjain9229]

thanks sir you helped a lot to understand the basis of api and how to complex things in simple way

[@codewithdary]

Love to help buddy :)

[@hichamelbachari2655]

what an amazing video!

[@codewithdary]

Thank you so much!

[@miyirbek6821]

Thanks a lot bro. You helped me so much

[@codewithdary]

I'm happy that I could help!

[@gp6723]

Great one!

[@codewithdary]

Thank you so much :)

[@tamilselvan-jas]

Thanks for the great tutorial, Can we validate the auth check in validation class, why we need a separate function in controller?, How to validate the type hinted model in form request class?

[@SR-hp4tp]

Amazing tutorial !

[@codewithdary]

Thank you!

[@w155uu]

hope you complete this tutorial by adding an extra section about token abilities and authorization. thanks

[@codewithdary]

The tutorial is very complete, what you want is additions :)

[@feedgaming8374]

tysm, you are so good at explaining subjects like this, appreciate your efforts,

[@codewithdary]

You're very welcome!

[@mahamedassoul6960]

your tutorial was very very helpful, thank you so much 👏

[@codewithdary]

Thank you for watching Mahamed!

[@chinazamekperechimbo1980]

This tutorial is the best I have ever seen for laravel API. I was wondering, what visual studio code extension do you use to automatically pull in newly created controllers to the route file

[@codewithdary]

Thank you so much. kzbin.info/www/bejne/gXK4qZqLq6hoZ5Y

[@collectorX]

Quick question Sir..if u set expiration value inside sanctum config.. do u still need to set up schedule()? like are we using both of 'em at the same time?

[@abrhamb2952]

Best Course on Sanctum Thanks a lot , Do you have Laravel Fortify Course ?

[@codewithdary]

Thank you so much Abrham! I unfortunately don't :(

[@ThaRealIansanity]

Small mistake in LoginUserRequest ? I think you referred to the 'email' rule as meaning it comes from the 'email' column. Actually validates that it is a properly formed email address. Also what is the need for 'string' rule if we are making sure it is a valid email? And for the password, Password::default() used in the register request rules has min:8 by default where we used min:6 in our login request. I just used Password::default() in both requests to make sure the rules match. Otherwise excellent course so far. I'm learning a lot and looking forward to moving to your authentication videos next

[@codewithdary]

Thank you Ian! I'm here to learn too ;)

[@dheeraj_kumar_1508]

Thank you very much Sir i saw the video and practice well

[@codewithdary]

Keep it up buddy!

[@dheeraj_kumar_1508]

@@codewithdary Sure Sir, thank you Sir

[@ABEDALLAHGOZAH]

how you used auth->attempt() to verify the credentials and in the same time generate a token, that's not a good practise because the auth()->attempt apply the seesion based authentication so the server is created a session on it after using this method

[@codewithdary]

The auth()->attempt() method is used to verify the credentials and log in the user. However, it does not generate a token directly. Instead, after successfully logging in the user, the code creates a token using $user->createToken('API Token')->plainTextToken.

[@ABEDALLAHGOZAH]

​@@codewithdary Yes, I mean after a successful attempt to log in user using the auth()->attempt() method the server creates a session for this user and sends it back to the browser, and no benefits from using the token-based authentication because as I know that among need for the token is to make the server more free in memory

[@kh1amirhamza]

Wonderful Tutorial!

[@codewithdary]

Thank you! Cheers!

[@Muhammed-nani964]

Noice video Dary we need more videos about auth with api for SPA front-end, and I have a question about authentication for a project. I'm confused about whether to use cookie or token-based API authentication. Which one do you suggest and which one is more secure? especially for SPA front-end

[@codewithdary]

Hi Muhammed! It's difficult to judge without knowing the project's background. However, token-based authentication is useful for storing data on the client-side, while cookie-based authentication is suitable for storing less secure data, as cookies can be vulnerable.

[@7Janiel]

Very good tutorial sir

[@JanLordLuga]

great tutorial. Thank you!

[@codewithdary]

Thank you Jan

[@johwel340]

super content. Thanks Dary.

[@codewithdary]

My pleasure John!

[@charbel12334]

getting a jumpscare with the start of each section😂. Very useful tutorial! Can you please make the frontend of this application with react js

[@codewithdary]

I have to keep my students awake you know :)

[@umar_adil]

This is a nice work and it helped me to improve my sanctum integration and few shortcuts. I am also listing out all users to list without login by any user how can I prevent that API from public access?

[@codewithdary]

Use a middleware!

[@Ali-qq9hy]

On 27:34 , where did you get that Route/Password::default() method. I cant import it

[@codewithdary]

Add the following use statement at the top of your file: use Illuminate\Validation\Rules;

[@darn2926]

@@codewithdary the error still does not clear, I am using laravel 9

[@davidadewale8466]

Thanks for the tutorial… I’m stucked here. I kept getting error (Error, class “Task” not found) when I tried to use tinker to generate task . Any assistance will be welcomed. Thanks

[@codewithdary]

This happens sometimes when composer has not loaded the classes correctly. The simplest solution is to add the entire path to it such as App\Models\Task

[@TheKennyWorld]

1:07:00 Update method

[@stuarttodd1875]

This is great, thank you

[@codewithdary]

Thank you for watching Stuart!

[@luisdev7646]

thank you very complete tutorial

[@codewithdary]

You are welcome Luis :)

[@NabeelPs-u6h]

hi sir, while using command line please make sure to write at top or middle , on bottom it gets hide byy youtube texts.

[@felixowino3271]

I get an error message in the postman SQLSTATE [42S22] column not found when i test login with a user who is not in the database, what could be the issue?

[@ChBoss-fc2yj]

Hay Felix, try "if(!Auth::attempt($request->only('email','password'))) {" instead of "if(!Auth::attempt([$request->only('email','password')])) {"

[@ThaRealIansanity]

@@ChBoss-fc2yj Thanks I'm always forgetting you can hover or ctrl+click on functions to see their definitions. It already returns an array 🙂

[@mudso]

@@ChBoss-fc2yj GREAT THANKS! you saved my day, is that square bracket a laravel 9 or 10 thing?

[@williamadil]

Good stuff 👍

[@АлександрФефилов-х4т]

Great job Dary. But I forgot how to deal with this ""The PATCH method is not supported for this route. Supported methods: GET, HEAD, POST."," resource controller can not be used?

[@codewithdary]

What is the route?

[@АлександрФефилов-х4т]

@@codewithdary timing 1:09:26 error "message": "The PATCH method is not supported for route api/tasks. Supported methods: GET, HEAD, POST.", "exception": "Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException", Please advise how to fix this error

[@codewithdary]

@@АлександрФефилов-х4т The patch method is used to update a resource, but you are trying to perform it on either retrieving or persisting a post. The endpoint for patch should be api/tasks/{id}

[@АлександрФефилов-х4т]

@@codewithdary thanks for the help. Inattentively looked, everything worked.

[@aouraghmohammedelamine5744]

thank you Dary for the tutorial it's very rich with informations and best practices , can you please update the repo ?

[@codewithdary]

Thank you so much. What is missing in the repo?

[@7Janiel]

One thing to ask: why did you not create form requests for all the Task functions ?

[@RaV86pl]

Great video again, love Your work. Just a question, can we use policies for sanctum API? feels like it should work and in this example it fits perfectly

[@codewithdary]

Yes you can!

[@codewithdary]

The reason why I didn't use policies is mainly because I nevr covered it in a separate video

[@aisalen]

Thanks for this great and clear tutorial! Hoping that you can continue creating tutorial for vue or react consuming the api from this.

[@codewithdary]

Definitely something I'll be doing very soon!

[@tukurhamid]

@@codewithdary can't wait 👍

[@jtech04]

Awesome dude, for covering advance topic😁😁

[@codewithdary]

Thank you so much :)

[@firassebai8592]

Thanks for clearing me sanctum because many ppls says its for beginners .. Else i ve another question am starting deving some apps with laravel without using any packages like sanctum or passport for auth, are they not secured 🤔 do tou recommend to use sanctum .. already setup auth for *not small projects thank you

[@codewithdary]

Glad I could help! Well I can’t say whether a custom auth system is secured or not without seeing it but you have to keep a lot of factors into consideration which are happening behind the scenes. I’m personally a fan of sanctum because of its simplicity, so I would recommend it (or Laravel passport for oauth2.0)

[@laravelug]

Thnx for the video, how can we implement roles and permission

[@codewithdary]

Laravel Spatie Roles and Permissions :)

[@jdbt7874]

thank you for your great content and detailed explanations, I really appreciate it

[@codewithdary]

My pleasure!

[@autoge13]

Why don't you use auth()->user() to get the current user instead of User::where('email',.....) after the Attempt? If the Attempt succeeds doesn't it mean that the auth() helper can be used as well?

[@codewithdary]

Looking at the code right now I do believe that you are right. The code I added isn’t necessarily wrong, but using auth()→user() is cleaner. use auth()->user(). If you need to retrieve user information based on a given condition, use User::where().

[@tond9997]

I can't run schedulte auto expires token in my test project . Can you explaining more and check and deepdown with topic expires datetime how it real work right ? If your explain , Ser ' I appreciate that.

[@alidahud337]

Hi, the expires_at value is still null after setting up the scheduler. As. I can see yours too. Any idea why?

[@mahdipaykoub9951]

It was great, but one question When we don't use the api of Laravel, the functionality of the register and login functions are implemented by Laravel. Is there no such api here?

[@sundayolaoye713]

Hi Dary, thanks for the good works. I am using VS code on windows, when you wanted to test your login in the 18mins of the video you typed laravel_sanctum.test/api/login. please, where is .test from? I have been trying and trying and keep getting errors on my postman? you also said we can use PHP artisan serve, I tried it in Postman it doesn't work?

[@codewithdary]

I’m using Valet, that’s why I’m able to add the .test. If you don’t use Valet you should use 127.0.0.1:8000.

[@moali9944]

Great video, Dary.

[@codewithdary]

Glad you think so Mo!

[@ulaskorpe]

thank you for this tutorial

[@codewithdary]

You're welcome 😊

[@robo64257]

This is a fantastic video tutorial and helped me a lot. thanks. But how can I create a password reset functionality through the API?

[@arash5094]

i like you tutorials

[@codewithdary]

Thank you so much, Arash

[@wellingtonchanda4067]

🔥🔥🔥 this is fire

[@codewithdary]

Thank you Wellington!

[@MrMozkoZrout]

Hey awesome video, I would just like to ask about that isNotAuthorised function that we created. Is there a reason it needs to be private ? And i mean i get that it is the right way but when it was created inside of the controller class shouldn't all other functions in that class be able to use that function ? I ask because i thought i will be able to replace the if statement in the update function and use the function not to have any redundant code but aparently the function update doesn't know the isNotAuthorised function. Why is that ? And if this doesn't work this way, how come the weird Ternary operator thingie could access the function ?

[@codewithdary]

First of all, thank you for your kind words. When I created the TasksController, I intended to use the isNotAuthorized method only within the controller itself and not in other classes. If you want to use the isNotAuthorized method in other classes, I suggest placing it inside the User Model where you can access it through auth()->user()->isNotAuthorized in any controller. Regarding your comment about the update method not knowing the isNotAuthorized function, I'm not sure what you mean. Could you please clarify?

[@MrMozkoZrout]

@@codewithdary Oh hello, thank you for your quick answer. You are great. Oh I am sorry I wrote that comment at like 4 am and o was confused. I already figured it out. I simply forgot that I have to use $this-> in front of the function in order to use this. And after I did I forgot that I also have to return the output of the function so I thought the update controller is just ignoring it. It works now when I put it into a classic if statement there. I never intended to use it in another class, sorry for the confusion. Now I am just thinking how to change the function so it doesn't need to be called twice. Once for the if statement and once to return the error.

[@ElieShamout]

Thank you very much, How i can check if Task is exists or no using FunctionName(Task $task)

[@codewithdary]

I recommend you to look into the findorFail method that Laravel offers :)

[@Ancient244]

GREAT EXPLANATION

[@MayankSinghParmar]

Very good video

[@Psychobellic]

Great content, Dary. Thank you!! Just wanted to add that I had some issues on the authentication, always getting Unauthorized back, even using traits.. But my issue was that I was using Breeze as starter kit, so I had to start a new project to make it work properly. It does now, I just don't understand why we create a token on register and a new one on login? Can you explain, please?

[@codewithdary]

Laravel Breeze doesn't use Sanctum! You need to look into that to get more clarification :)

[@AlexGower]

Laravel breeze -api uses sanctum all you need to do is get csrf before try to login etc and then it will refresh the csrf with every authenticated request

[@__Cypher]

I have a question Why did you created Token at the time of User registration ?? We are creating a token in login and if a user register then he will definitely going to do login

[@codewithdary]

It's an educational tutorial, I can't just show users to register and end up with the video. Most apps have login/register. It's up to the viewers how they are going to implement it inside their working app :)

[@ferlezcano]

Great content

[@giodafirst0]

Great tutorial ! Tx!

[@codewithdary]

Thank you, Serge!

[@luisuran4050]

Something that bothers me is that on the update method you are giving the user the chance to update any field. I would instead do "$task->update($request->only(['name', 'description', 'priority']));"

[@codewithdary]

I'm happy you saw that. Honestly don't really have a reason why I used it inside the AuthController and not inside of the TasksController. Just a mistake on my part.

[@bestepisodes5774]

Task::factory()->times(2)->create(); Error Class "Task" not found. showing this error. Can you help me

[@codewithdary]

Ensure that the Task model file is autoloaded properly by checking your composer.json file. This can be done by running the following command: composer dump-autoload.

[@darwinibay2174]

you are a master

[@codewithdary]

Thank you Darwin

[@JLaurel]

You should do a Postman course. That would be great info...

[@codewithdary]

I’ve got a video on my channel where I setup postman

[@EljayPucan]

Question: Why did you use Trait instead of Laravel resources for API?

[@codewithdary]

If I’m correct, because It has been a while, I used the trait to determine the type of message that should be returned and the API resource to specify how the data should be returned.

[@EljayPucan]

@codewithdary I guess it needs version 2 of this awesome tutorial 🤗