Laravel - Recomended authentication for a REST api

Question

I'm building a RESTful api using Laravel that is serving an Ember js application.

I'm currently trying to implement oath-4-laravel but I'm not sure it will work for my proposes(to serve my js application).

I don't want to use ssl because of the overhead and basic authentication won't suffice. Tried to take a look at HTTP Digest but apparently it's not that safe.

This is my first time building a serious RESTful api and I'm a bit lost when it comes to this. So I'm looking for advice, maybe there's a better package for it or I will have to develop my own.

Thanks in advance.

passioncoder · Accepted Answer · 2014-09-05 18:54:04Z

4

It strongly depends who should be able to authenticate against your API. If you just want to access the API from your own js-client, an OAuth implementation is imho a huge overhead.

If basic auth / auth digest is too weak for your case, you can have a look at the concept of hmac. There are also a few packages available which should it make easy to integrate it in L4.

But just in case, OAuth is a great choice if you're planing to grant API access to 3rd-party clients/developers. I'd recommend you the oauth2-server-laravel which is a laravel4 integration of the phpleague oauth2 server. I just finished a project with this package, worked out very nice.

Just my 2 cents, hope this helps you.

answered Sep 5, 2014 at 18:54

passioncoder

9296 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

bzlies Over a year ago

Thank you very much for the reponse, I decided to go phpleague oath2 as the api will be somewhat public.

Collectives™ on Stack Overflow

Laravel - Recomended authentication for a REST api

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related