What is the difference between Laravel auth, Passport and Sanctum and when are they used?
What is the difference between Laravel auth, Passport and Sanctum and when are they used?
Passport provides a full OAuth2 server implementation for your Laravel application in a matter of minutes. It is therefore necessary to have a brief knowledge of OAuth2.
Sanctum it is a simple package to issue API tokens to your users without the complication of OAuth. Sanctum uses Laravel's built-in cookie based session authentication services.
In a small application use Sanctum. it's simple and easy
Auth (Authentication) is the process of identifying the user credentials. In web applications, authentication is managed by sessions which take the input parameters such as email or username and password, for user identification. If these parameters match, the user is said to be authenticated.
Refrences:
Hope it helps..
Thanks.
For me, Sanctum is a lighter auth system to used in SPA under the same domain as the API. while Passport (OAuth2) allows to sign in from a SPA to another domain, and user is redirected to backend to login, which is complicated. Token and JWT just seem older and more difficult.