Laravel 5.1 RESTful api authentication

Question

I'm building RESTful backend in PHP for a mobile app.

I will need users to log in, and then all auth should be handled with tokens. My idea is: generate a token when the user's logs in (this token will be oneshot) everytime a user performs an action this token will be used to authenticate him and then "burned", the application (in the json response) will provide a new oneshot token. How can implement this in laravel 5.1? Is there some library with similar token implementatio?

Thank you in advance for your help.

Answer 1

I had similar situation. I came up with a middleware, which checks for a special token header (ie MyToken: asdasd) in every request, except the login request. In login request, I check provided information and if it is OK, then I will generate a token and save it to database. Every subsequent request should have this token, and it will be checked against database to be correct and also not expired.

The good thing here was the middleware, made the solution very easy-to-implement.

Read more about middlewares