laravel-passport

Multi Auth with Laravel 5.4 and Passport

余生长醉 提交于 2020-11-26 08:49:27
问题 I am trying to setup multi auth with Laravel Passport, but it doesn't seem to support it. I am using the Password Grant to issue tokens which requires me to pass username/password of the user wanting access tokens. I have 3 auth guards/providers setup, 4 in total. Users, Vendors, Admins and API 2 of the Auths need passport access, so each user needs to be able to issue tokens. But Passport automatically takes the API auth provider, but I want this to change based on which user is logging in..

Multi Auth with Laravel 5.4 and Passport

大憨熊 提交于 2020-11-26 08:48:25
问题 I am trying to setup multi auth with Laravel Passport, but it doesn't seem to support it. I am using the Password Grant to issue tokens which requires me to pass username/password of the user wanting access tokens. I have 3 auth guards/providers setup, 4 in total. Users, Vendors, Admins and API 2 of the Auths need passport access, so each user needs to be able to issue tokens. But Passport automatically takes the API auth provider, but I want this to change based on which user is logging in..

Unauthorized API Calls - Secure and allow only registered Frontend app

本小妞迷上赌 提交于 2020-07-23 04:03:11
问题 I have backend api in Laravel and using Laravel Passport(OAuth2) . I see OAuth2 is super cool and secures my auth request (with api middleware in laravel) and allow access only to authorized users. But i can access the backend api for unauthorised usage for example Routes: ( /register ) or ( /login ) without any api key. Most attackers will see this api call in network tab and can send DDOS attack. Since Laravel Passport has rate-limiting inbuilt, still i don't want people to access my

Unauthorized API Calls - Secure and allow only registered Frontend app

纵然是瞬间 提交于 2020-07-23 04:02:27
问题 I have backend api in Laravel and using Laravel Passport(OAuth2) . I see OAuth2 is super cool and secures my auth request (with api middleware in laravel) and allow access only to authorized users. But i can access the backend api for unauthorised usage for example Routes: ( /register ) or ( /login ) without any api key. Most attackers will see this api call in network tab and can send DDOS attack. Since Laravel Passport has rate-limiting inbuilt, still i don't want people to access my