Feature: Laravel Passport Authentication

app/Http/Controllers/Api/LoginController.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Contracts\UserRepositoryInterface;
+use App\Http\Controllers\Controller;
+use Illuminate\Contracts\Hashing\Hasher;
+use Illuminate\Http\Request;
+
+class LoginController extends Controller
+{
+
+    /**
+     * @var UserRepositoryInterface
+     */
+    protected $user;
+
+    /**
+     * @var Hasher
+     */
+    protected $hasher;
+
+    public function __construct(UserRepositoryInterface $user, Hasher $hasher)
+    {
+        $this->user = $user;
+        $this->hasher = $hasher;
+    }
+
+    public function validateUser(Request $request)
+    {
+        $email = $request->get('email');
+        $password = $request->get('password');
+
+        $user = $this->user->model()
+            ->whereEmail($email)
+            ->first();
+
+        if (!$user) {
+            return response('User Not Found', 401);
+        }
+
+        if ($this->hasher->check($password, $user->password)) {
+            $token = $user->token();
+
+            if (!$token) {
+                $token = $user->createToken('Personal Access Token')->accessToken;
+            }
+
+            return response([
+                'access_token' => $token,
+                'user' => $user
+            ], 200);
+        }
+
+        return response('Unauthorized', 401);
+    }
+}

app/Providers/ApiRouteServiceProvider.php

@@ -36,6 +36,9 @@ public function register()
      */
     public function map()
     {
+        $this->apiRoute('auth', 'LoginController')
+            ->add('login', 'validateUser', 'post', 'login');
+
         $this->apiRoute('users', 'UserController')->addDefaults();
         $this->apiRoute('artists', 'ArtistController')->addDefaults();
         $this->apiRoute('albums', 'AlbumController')->addDefaults();

app/Providers/AuthServiceProvider.php

@@ -3,8 +3,8 @@
 namespace App\Providers;
 
 use App\Contracts;
-use App\Policies;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+use Laravel\Passport\Passport;
 
 class AuthServiceProvider extends ServiceProvider
 {
@@ -33,5 +33,8 @@ public function boot()
         $this->policies[resolve(Contracts\UserRepositoryInterface::class)->class()] = Policies\UserPolicy::class;
 
         $this->registerPolicies();
+
+        Passport::routes();
+        Passport::hashClientSecrets();
     }
 }

app/Services/ApiRoute.php

@@ -23,6 +23,11 @@ class ApiRoute
      */
     private $controller;
 
+    /**
+     * @var string|array|null
+     */
+    private $middleware;
+
     /**
      * @var array $routes
      */
@@ -67,7 +72,7 @@ protected function defaults()
         $routes = $this->routes;
 
         Route::prefix('api')
-            ->middleware('api')
+            ->middleware($this->middleware ?: 'api')
             ->namespace($this->namespace)
             ->group(function () use ($routes, $controller, $prefix) {
                 Route::prefix($prefix)->group(function () use ($routes, $controller, $prefix) {
@@ -84,6 +89,17 @@ protected function defaults()
         return $this;
     }
 
+    /**
+     * @param string|array $middleware
+     * @return $this
+     */
+    public function middleware($middleware)
+    {
+        $this->middleware = $middleware;
+
+        return $this;
+    }
+
     public function addDefaults(array $excepts = [])
     {
         if (count($excepts) > 0) {
@@ -113,7 +129,7 @@ public function add($uri, $controllerMethod, $httpMethod = 'get', $name = null)
         $name = is_null($name) ? Str::snake($controllerMethod) : $name;
 
         Route::prefix('api')
-            ->middleware('api')
+            ->middleware($this->middleware ?: 'api')
             ->namespace($this->namespace)
             ->group(function () use (
                 $controller,

app/User.php

@@ -5,10 +5,11 @@
 use Illuminate\Contracts\Auth\MustVerifyEmail;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Laravel\Passport\HasApiTokens;
 
 class User extends Authenticatable
 {
-    use Notifiable;
+    use HasApiTokens, Notifiable;
 
     /**
      * The attributes that are mass assignable.

composer.json

@@ -13,6 +13,7 @@
         "fruitcake/laravel-cors": "^1.0",
         "guzzlehttp/guzzle": "^6.3",
         "laravel/framework": "^7.0",
+        "laravel/passport": "^9.2",
         "laravel/tinker": "^2.0",
         "moneyphp/money": "^3.3"
     },