Level 33
Apr 7, 2020
2
Level 1
Laravel API + Vue Frontend
I would like to build a Laravel API and a completely separated Frontend, for example with Vue. API and Frontend would be on separated servers.
Are there any Tutorials that teach the Best Practice? Most important thing would be the authentication (User Login + API-Authentication), because the Application has to handle sensitive data.
I searched for something like that in the laracasts-tutorials, but did not find something like that.
Level 1
I was not sure if it is safe enough to send credentials simply with axios, but it seems that this is the common way to do what i want to do.
My authentication steps:
- Post username and password with axios
- Validate credentials with laravel-passport
- Return api-token if credentials are correct
- store api-token in localstorage
- use api-token for every request against laravel-backend
- if api-token is invalid return authentication error else return requested data
- listen for auth-error in vue and maybe go to login-page or something like that
Would that be the correct or at least one correct way to do it? I wonder if that is safe enough.
Edit: if api-token is available from localstorage, that means user is logged in and the process would start with number 5
Please or to participate in this conversation.