Laravel API Authentication: Token Scopes

Allow your API clients to request a specific set of permissions when requesting authorization to access an account.

Defining Scopes

Use Laravel\Passport\Passport;

Passport::tokensCan([
    'place-orders' => 'Place orders',
    'check-status' => 'Check order status',
]);

Assigning Scopes To Tokens

Checking Scopes

'scopes' => \Laravel\Passport\Http\Middleware\CheckScopes::class,
'scope' => \Laravel\Passport\Http\Middleware\CheckForAnyScope::class,

Laravel API Authentication: Token Scopes — Structure map

Clickable & Draggable!

Laravel API Authentication: Token Scopes — Related pages: