After 3 tutorials, we've got a nice API, But we've been completely ignoring authentication. What about API tokens? Or properly handling errors? Thanks to some modern tools, this will be such a treat:
- Understanding JSON web tokens (JWT)
- Creating, signing & returning JWT's
- Using Guard for a custom JWT authentication system
- Sending tokens on the Authorization header
- Proper API errors for invalid credentials and missing credentials
- Choosing to split into 2 firewalls