How to Build a Professional API with Laravel Sanctum

Introduction

Laravel Sanctum provides a featherweight authentication system for SPAs and mobile applications. In this article we'll explore how to set it up professionally.

Installation

First, install Sanctum via Composer:

composer require laravel/sanctum
php artisan vendor:publish --provider="Laravel\Sanctum\SanctumServiceProvider"
php artisan migrate

Setup

In your User model, add the trait:

use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;
}

Creating Tokens

After login, issue the user a token:

$token = $user->createToken('auth_token')->plainTextToken;
return response()->json(['token' => $token]);

Protecting Routes

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/profile', [ProfileController::class, 'show']);
});

Conclusion

Laravel Sanctum is the ideal choice for building APIs for modern apps. Simple, secure, and easy to integrate with Flutter and React Native.

المقدمة

Laravel Sanctum يوفر نظام مصادقة خفيف الوزن لـ SPAs وتطبيقات الموبايل. في هذا المقال سنستعرض كيفية إعداده بشكل احترافي.

التثبيت

أولاً نقوم بتثبيت Sanctum عبر Composer:

composer require laravel/sanctum
php artisan vendor:publish --provider="Laravel\Sanctum\SanctumServiceProvider"
php artisan migrate

الإعداد

في ملف User model نضيف الـ trait:

use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;
}

إنشاء Tokens

بعد تسجيل الدخول نعطي المستخدم token:

$token = $user->createToken('auth_token')->plainTextToken;
return response()->json(['token' => $token]);

حماية الـ Routes

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/profile', [ProfileController::class, 'show']);
});

الخاتمة

Laravel Sanctum هو الخيار الأمثل لبناء APIs للتطبيقات الحديثة. بسيط، آمن، وسهل التكامل مع Flutter وReact Native.