Method for using Laravel native Policies for API authorization? about laravel-json-api HOT 4 CLOSED

Authorization all updated, documented and added to the demo app. See:
https://github.com/cloudcreativity/laravel-json-api/blob/master/docs/basics/security.md

Released as v1.0.0-alpha.2

from laravel-json-api.

The Authorizer class is the way that you handle authorization of a JSON API request. I need to add an example to the demo app.

In essence there's an AbstractAuthorizer that can be extended and the authorizer is then injected into your Request class for a resource type (you'll see it's the first argument of the parent constructor).

Our approach is to hand off the Laravel policies via Gate within the Authorizer.

This might make more sense if I add it to the demo app. I'll try to do that but I have pressing work deadlines at the moment so not sure I'm going to be able to do it this week...

from laravel-json-api.

Sounds good, I'll give it a shot!

from laravel-json-api.

I'm reopening this as a reminder to add it to the demo.

from laravel-json-api.