Sanctum & Passport, with Taylor Otwell

In this episode, we talk with Taylor Otwell about the first-party Laravel auth packages Passport and Sanctum. We discuss the history of how they came to be, their differences, and which of the two might better serve your needs.
---
Taylor Otwell's Twitter - / taylorotwell
Laravel, Twitter - / laravelphp
Laravel, Website - laravel.com/
Laravel Docs: Passport - laravel.com/do...
GitHub: Passport - github.com/jar...
Laravel Docs: Sanctum - laravel.com/do...
GitHub: Sanctum - github.com/lar...
The League of Extraordinary Packages - thephpleague.com/
Laravel Docs: Tinker - laravel.com/do...
GitHub: Tinker - github.com/lar...
OAuth 1 - oauth.net/1/
OAuth 2.0 - oauth.net/2/
Spark - spark.laravel....
Forge - forge.autodesk...
Vapor - docs.vapor.cod...
JWT - jwt.io/
GitHub: node-fetch - github.com/nod...
Axios - axios-http.com...

[@ocanodiego]

Taylor always so chill and it's so easy to understand him.

[@gurmukhsingh-uh5qo]

thanks for this discussion, was really confused if I need to use sanctum or passport because was using passport for last 2-3 years.

[@madalinignisca6762]

If you build a SaaS that allows providers to add Applications for your users, you must use Passport. You can use Sanctum only for "personal" tokens, with benefit of scopes. But with sanctum, how can you know that a user has allowed an application to manage their data, as the token is linked to them and some scopes?

[@jfordgaming9615]

what about the microservices? sanctrum, passport or jwt?

[@mel-182]

Hi! what about SSO? What would be the best package for SSO?

[@MrSMGun]

I love sanctum and I use it over passport any chance I get (sometimes, even in the same project!!). The single reason I am using passport, is to tell Cyber Security team that oauth2 is implemented so they can stfu

[@alfanzain9031]

today I just watched this after trying Passport and got confused xD

[@medilies]

Where are Kirk & Spock ? XD