Download the PHP package ryangjchandler/bearer without Composer
On this page you can find all versions of the php package ryangjchandler/bearer. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download ryangjchandler/bearer
More information about ryangjchandler/bearer
Files in ryangjchandler/bearer
Package bearer
Short Description Minimalistic token-based authentication for Laravel API endpoints.
License MIT
Homepage https://github.com/ryangjchandler/bearer
Informations about the package bearer
Bearer
Minimalistic token-based authorization for Laravel API endpoints.
Installation
You can install the package via Composer:
You can publish and run the migrations with:
You can publish the config file with:
Usage
Creating tokens
To create a new token, you can use the RyanChandler\Bearer\Models\Token
model.
Alternatively, you can use the RyanChandler\Bearer\Facades\Bearer
facade to generate
a token.
By default, Bearer uses time-ordered UUIDs for token strings. You can modify this behaviour by passing a Closure
to Bearer::generateTokenUsing
. This function must return a string for storage to the database.
Retrieving a Token
instance
To retreive a Token
instance from the token
string, you can use the RyanChandler\Bearer\Facades\Bearer
facade.
Using a token in a request
Bearer uses the Authorization
header of a request to retreive the token instance. You should format it like so:
Verifying tokens
To verify a token, add the RyanChandler\Bearer\Http\Middleware\VerifyBearerToken
middleware to your API route.
Token expiration
If you would like a token to expire at a particular time, you can use the expires_at
column.
Or just use the class's helper methods.
If you try to use the token after this time, it will return an error.
Limit tokens to a particular domain
Token usage can be restricted to a particular domain. Bearer uses the scheme and host from the request to determine if the token is valid or not.
If you attempt to use this token from any domain other than https://laravel.com
, it will fail and abort.
Note: domain checks include the scheme so be sure to add both cases for HTTP and HTTPS if needed.
Testing
Contributing
Please see CONTRIBUTING for details.
Security Vulnerabilities
Please review our security policy on how to report security vulnerabilities.
Credits
- Ryan Chandler
- All Contributors
License
The MIT License (MIT). Please see License File for more information.
All versions of bearer with dependencies
illuminate/contracts Version ^11.0
illuminate/database Version ^11.0
illuminate/http Version ^11.0
spatie/laravel-package-tools Version ^1.16