Laravel Passport vs Sanctum: What's the difference?

In this short 8 minute video, I'll explain the similarities and differences between two first-party Laravel authentication packages: Passport and Sanctum.
You'll learn about how:
- Both can create authentication tokens
- Both can guard routes
- Sanctum can be used with SPAs
- Passport uses a full OAuth2 workflow
- 0:00 Intro
- 00:36 Similarities
- 03:39 Differences
- 07:58 Wrapping Up
Send me new video ideas and vote on what's coming next: suggest.gg/aschmelyun
Follow me on Twitter! / aschmelyun
Join my newsletter, where I send out new information twice each month in the PHP, JavaScript, and Docker worlds: aschmelyun.substack.com

[@Samuel.Mwangi]

Thanks for a great video as always. At 6:19 you're correct that tokens don't expire by default but Sanctum 3 introduced tokens expiration that was long overdue. So both Passport and Sanctum support expiration.

[@kevinwakhisi7001]

Miss this guy

[@dr.adam.nielsen]

Great video. Thank you.

[@phojie6868]

oh, your back now 😃

[@andreich1980]

Thanks for the vid Andrew. I'd like to see more about the sanctum token flow. By the way, scopes/abilities are more readable when they are 'view:posts' rather than 'views:posts' because we later could use them as user()->can('view:posts').

[@andreich1980]

And my question about tokens is: where do you store them, how do you check if they are valid (send options request before each request? Or just send regular request, catch 401 or so and redirect to login?) and what do you do if they aren't, etc

[@lyawileh.a8741]

Superb

[@ssheduardo]

Thanks you, please more videos same

[@emekatimothyiloba699]

Thank you

[@tasnimcs5473]

Thanks !

[@HamadAbdulla_7]

😍😍😍

[@ashikmehermobin9926]

In cookie based auth in SPA sanctum the Auth::guard('web')->logout() does not work. I had to delete the cookie in frontend app to be unauthorized by the backend server. I don't understand why they Didn't fix it?

[@wahyusetya172]

laravel sanctum v3.0++ can set sanctum api token expiration now

[@mahmoudadel8313]

Both packages are great so why people go to jwt package

[@mohammadashrafuddinferdous9347]

JWT is universally adapted, a known standard. I used sanctum and jwt. Bothvare good. I've s plan to create a boilerplate for passport for applications.