使用社交身份验证功能保护Lumen REST API的最佳方法

Question

I am kinda new to building rest api with social authentication feature .

I will have a custom registration and login system of my lumen api and also social login and registration system.

I am confused about two things -

1. What is the best way to secure or implement authentication in Lumen REST API ? (Like how people do it nowadays, using OAuth1.0a, OAuth2, OAuth, or simply Lumen Authentication with api_token or JWT or public key/private key)

2. If I want to add social login/registration feature in my Lumen REST API, which directions should I follow? and for that do I need to structure my user table in database in a different way ? and as those social media uses OAuth2, which authentication of Lumen will be adaptive for that feature's requirement.

Currently I am using default authentication system of Lumen , with the user database structure -

• user_id
• user_email
• user_passowrd (Hashed)
• user_api_token
• user_status
• user_created_at
• user_updated_at

As you can see here I am not using any Auth Method, and expiration system of the token.

Any kind of help would be appreciated. Thanks in Advance !

Answer 1

使用社交名流进行社交认证https://laravel-news.com/oauth-with-angular-lumen-socialite-and-satellizer