laravel 11 sanctum api authentication example code

Learn how to implement API authentication in Laravel 11 using Sanctum. This guide includes an example AuthController that demonstrates user registration, login, logout, and token management for secure API authentication.

First create laravel project using below command

composer create-project laravel/laravel laravel-api

Update your database configuration details in php .env file as per your requirements.

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=laravel_api
DB_USERNAME=root
DB_PASSWORD=password

Now add sanctum api to your laravel application

php artisan install:api

Create controller class AuthController using php artisan command

php artisan make:controller API/AuthController

app/Http/Controllers/API/AuthController.php

<?php

namespace App\Http\Controllers\API;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\User;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Validator;

class AuthController extends Controller
{
    public function register(Request $request) {

        $request->validate([
            'name' => 'required|max:255',
            'email' => 'required|email|unique:users',
            'password' => 'required|confirmed'
        ]); 

        $input = $request->all();

        $user = User::create($input);
        if($user) {
            $token = $user->createToken($user->name)->plainTextToken;
            return response()->json([
                'success' => true,
                'user' => $user,
                'access_token' => $token
            ], 200);
        }else {
            return response()->json([ 'success' => false, 'error' => 'error while creating account'], 401);
        }
    }
    
    
    public function login(Request $request) {
        
        $input = $request->all();

        $validation = Validator::make($request->all(), [
            'email' => 'required|email|exists:users',
            'password' => 'required'
        ]);

        if($validation->fails()) {
            return response()->json([
                'success' => false,
                'error' => $validation->errors()
            ], 401);
        }

        $user = User::where('email', $input['email'])->first();

        if($user && Hash::check($input['password'], $user->password)) {
            return response()->json([
                'success' => true,
                'token' => $user->createToken($user->name)->plainTextToken
            ], 200);
        }else {
            return response()->json([
                'success' => false,
                'error' => 'Invalid credentials!'
            ], 401);
        }
    }
	public function logout(Request $request) {

        $request->user()->tokens()->delete();

        return response()->json([
            'success' => true,
            'message' => 'You have logged out successfully'
        ]);
    }
}