SHELL

install sanctum

composer require laravel/sanctum

php artisan vendor:publish --provider="LaravelSanctumSanctumServiceProvider"

php artisan migrate


"!!!!!!Next, if you plan to utilize Sanctum to authenticate an SPA, you should add Sanctum's middleware to your api middleware group within your application's app/Http/Kernel.php file:!!!!!"
'api' => [
    LaravelSanctumHttpMiddlewareEnsureFrontendRequestsAreStateful::class,
    'throttle:api',
    IlluminateRoutingMiddlewareSubstituteBindings::class,
],

laravel sanctum

//install
composer require laravel/sanctum
  
// vendor
php artisan vendor:publish --provider="LaravelSanctumSanctumServiceProvider"

laravel sanctum

Broadcast::routes(['middleware' => ['auth:sanctum']]);

sanctum laravel

composer require laravel/sanctum

laravel sanctum

return $user->createToken('token-name', ['server:update'])->plainTextToken;

laravel sanctum

use AppModelsSanctumPersonalAccessToken;
use LaravelSanctumSanctum;

/**
 * Bootstrap any application services.
 *
 * @return void
 */
public function boot()
{
    Sanctum::usePersonalAccessTokenModel(PersonalAccessToken::class);
}

laravel sanctum

use IlluminateHttpRequest;

Route::middleware('auth:sanctum')->get('/user', function (Request $request) {
    return $request->user();
});

laravel sanctum

axios.defaults.withCredentials = true;

laravel sanctum

use LaravelSanctumHasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;
}

laravel sanctum

// Revoke all tokens...
$user->tokens()->delete();

// Revoke the token that was used to authenticate the current request...
$request->user()->currentAccessToken()->delete();

// Revoke a specific token...
$user->tokens()->where('id', $tokenId)->delete();

laravel sanctum

if ($user->tokenCan('server:update')) {
    //
}

laravel sanctum

axios.get('/sanctum/csrf-cookie').then(response => {
    // Login...
});

laravel sanctum

use LaravelSanctumPersonalAccessToken as SanctumPersonalAccessToken;

class PersonalAccessToken extends SanctumPersonalAccessToken
{
    // ...
}

laravel sanctum

foreach ($user->tokens as $token) {
    //
}

laravel sanctum

return $request->user()->id === $server->user_id &&
       $request->user()->tokenCan('server:update')

laravel sanctum

'domain' => '.domain.com',