...

MyObsidianVault/WebDev/2 CodeIgniter/19.) Create API Auth Filter.md

@@ -0,0 +1,61 @@
+https://www.youtube.com/watch?v=USqOc-GCA4s&list=PLT9miexWCpPW6Z_OXNv2d78cqCrZaPrVG&index=32
+
+Create AuthFilter.php
+```bash
+php spark make:filter Auth --suffix
+```
+
+Define before method in AuthFilter.php
+```php
+public function before(RequestInterface $request, $arguments = null) 
+{
+	helper("auth");
+
+	if (!auth("tokens")->loggedIn()) {
+		return redirect()->to(base_url("api/ invalid-access")); // need to create invalid-access route
+	}
+}
+```
+
+
+Routes.php
+```php
+// API ROUTES
+$routes->group("api",["namespace]=> "App\Controllers\Api"], function($routes) {
+	...
+	$routes->get("invalid-access", "AuthController::accessDenied");
+	§routes->get('demo-method", "AuthController::demoMethod",["filter" => "apiauth"]); // Filter Name is defined in aliases array in Filters.php below.
+	...
+```
+
+Define accessDenied method in app/Controllers/Api/AuthController.php
+```php
+...
+public function accessDenied()
+{
+	return $this->respondCreated([
+		"status" => false,
+		"message" => "Invalid access",
+		"data" => []
+	]);
+}
+...
+```
+
+Add filter to app/Config/Filters.php
+```php
+use App\Filters\AuthFilter;
+
+
+public array $aliases = [
+			'csrf' => CSRF::class,
+			'toolbar' => DebugToolbar::class,
+			'honeypot' => Honeypot::class,
+			'invalidchars' => InvalidChars::class,
+			'secureheaders' => SecureHeaders::class,
+			'apiauth' => AuthFilter::class
+]
+```
+
+Authorize request by adding field "Authorization" with value "Bearer xxxxxx" in Request Header:
+![[Pasted image 20241127140801.png]]