add a token controller & endpoint

Author: Gareth Redfern

app/Http/Controllers/TokenController.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\ValidationException;
+
+class TokenController extends Controller
+{
+    /**
+     * This controller provides a token for mobile devices
+     * It can also be used to access the API via a GUI
+     * Insomnia or Postman are two examples of GUI's
+     */
+    public function __invoke(Request $request)
+    {
+      $request->validate([
+        'email' => 'required|email',
+        'password' => 'required',
+        'device_name' => 'required',
+      ]);
+
+      $user = User::where('email', $request->email)->first();
+
+      if (!$user || !Hash::check($request->password, $user->password)) {
+        throw ValidationException::withMessages([
+          'email' => ['The provided credentials are incorrect.'],
+        ]);
+      }
+
+      $token = $user->createToken($request->device_name)->plainTextToken;
+
+      return response()->json(['token' => $token], 200);
+    }
+}

app/Models/User.php

@@ -6,10 +6,11 @@
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Laravel\Sanctum\HasApiTokens;
 
 class User extends Authenticatable implements MustVerifyEmail
 {
-    use HasFactory, Notifiable;
+    use HasApiTokens, HasFactory, Notifiable;
 
     /**
      * The attributes that are mass assignable.

routes/api.php

@@ -2,6 +2,8 @@
 
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
+use App\Http\Controllers\TokenController;
+use App\Models\User;
 
 /*
 |--------------------------------------------------------------------------
@@ -14,10 +16,16 @@
 |
 */
 
+Route::post('/sanctum/token', TokenController::class);
+
 Route::middleware('auth:sanctum')->get('/users/{user}', function (Request $request) {
   return $request->user();
 });
 
+Route::middleware('auth:sanctum')->get('/users', function (Request $request) {
+  return User::all();
+});
+
 Route::middleware('auth:sanctum')->get('/users/auth', function (Request $request) {
   return auth()->user();
 });