generate accessToken to retrieve data from api using passport

Question

Is there any possible way to generate access Token so that when anyone tries to retrieve data from the API they must pass the token as header to get access to that

I have been searching for it but it every website is showing this->

$user = Auth::user(); 
$success['token'] =  $user->createToken('MyApp')-> accessToken;

There won't be any user for this purpose, When the other website will hit this api with valid header it will atomatically send all the data to that device .....

can anyone help me with this any help would be highly appreciated ....

If there are no users how are you going to keep record of sessions? — Deepesh Thapa, Oct 01 '20 at 17:16

Deepesh Thapa · Accepted Answer · 2020-10-01T17:10:45.523

1

Why dont you create a database called token and store multiple token strings.

Then, whenever, a request hits the server it checks for that token is present or not in the https header.

This way you can create multiple tokens and share it with your API partners. However, this is always public so you might want to add security features on it.

Since you dont have users, there will not be a two way handshake such that you will have to keep sending same token on all requests

So my proposal would be use of API Secret keys.

Steps:

Store api keys in database tables
Send API keys in http headder
As soon as the request hits the server check if token is present in the header
IF token is present check if the token matches database records

By the way without a user the api token is not that secured.

edited Oct 01 '20 at 17:10

answered Oct 01 '20 at 17:04

Deepesh Thapa

1,721
3
19
29

Hey thanks for helping , can u tell me how can generate a secret key? – Swarnadeep Oct 01 '20 at 17:20
There are many ways to generate unique keys. You could uncrypt using sha, salt etc. Or convert randomly generated alpha numeric number to md5 or base64 – Deepesh Thapa Oct 02 '20 at 06:49
https://stackoverflow.com/questions/1846202/php-how-to-generate-a-random-unique-alphanumeric-string-for-use-in-a-secret-l – Deepesh Thapa Oct 02 '20 at 06:51

generate accessToken to retrieve data from api using passport

1 Answers1