Authenticating API routes in leaf framework

[kofesto]

Authenticating API routes in leaf framework

[mychidarko]

Hi @kofesto, thanks for the compliments. By authenticating API, do you mean having an auth flow eg: JWTs with Bearer tokens?

[iammiloslukic]

@kofesto The best way to do is to create a Auth middleware and to call it for all routes.
This way you can create an authentication that you need (API-KEY, Bearer, etc.)

This is how I do it:

app()->before('GET', '/.*', function () { }, ['middleware' => ['ApiAuthentication']]);

[kofesto]

Hi @kofesto, thanks for the compliments. By authenticating API, do you mean having an auth flow eg: JWTs with Bearer tokens?

Yes I mean authentication flow all API routes with JWT token, the documentation for middleware is not comprehensive enough, I know the auth flow can be handled by creating an authentication middleware

[kofesto]

@kofesto The best way to do is to create a Auth middleware and to call it for all routes. This way you can create an authentication that you need (API-KEY, Bearer, etc.)

This is how I do it:

app()->before('GET', '/.*', function () { }, ['middleware' => ['ApiAuthentication']]);

I get your explanation, but then the problem is how do I create an authentication middleware ?

[iammiloslukic]

@kofesto

Create ApiAuthentication.php to middleware folder.

To class you need to create yourself depends on what your needs are, but the start is like this:

class ApiAuthentication extends Leaf\Middleware{ }

And that's it.
The code I sent earlier should be located in _app.php

[iammiloslukic]

@kofesto If you struggle with the Class try using ChatGPT or search the web for some code

[kofesto]

To class you need to create yourself depends on what your needs are, but the start is like this:

class ApiAuthentication extends Leaf\Middleware{ }

Thanks I get it now