Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

markotitel's avatar

Laravel Passport, 'personal access' and 'password grant'

I am building CI/CD for a project where Laravel Passport is used. From the docs

Next, you should run the passport:install command. This command will create the encryption keys needed to generate secure access tokens. In addition, the command will create "personal access" and "password grant" clients which will be used to generate access tokens:

Where are personal access and password grant stored? And how are they used?

Only thing I know is that API auth is working without these.

I generate keys without issuing passport install and deploy them as ENV vars. So I know I do not have to use passport:install at all.

EDIT: I guess those are used for oAuth. And do not need them for API auth.

0 likes
2 replies
tisuchi's avatar

@markotitel

Once you have migrated the passport, you may see oauth_clients table in your DB.

personal access and password grand will be stored there.

1 like
markotitel's avatar

Are these used to generate access tokens for API authentication? Or are these used just for oAuth?

If I do not do passport:install on a fresh database but provide valid private/public keys, will API auth work?

Please or to participate in this conversation.