Laravel and JWT

[josuelrocha]

Hello,

I was thinking about Laravel and JWT and a question came up, why doesn't Laravel adopt JWT as standard authentication for API? Is JWT not considered the standard for authentication APIs on the internet? Is there any specific reason why Laravel developers prefer OAT over JWT?

I appreciate any comments from the community on the subject. :)

[PaolaRuby]

https://laravel.com/docs/8.x/sanctum

[josuelrocha]

the sanctum package does not use JWT but OAT.

[PaolaRuby]

Sorry I've never heard about OAT, just OAUTH and JWT

[josuelrocha]

OAT (opaque access token) is a simple token, which needs to be stored in the backend for validation, while JWT does not need to be stored and all the information is inside the token itself and is signed by the backend so that its modification is not possible.

[PaolaRuby]

Thanks for the info

[skdishansachin]

[wizzymore]

Why do you need JWT? Laravel Sanctum works in the same way, only that the token looks different and can't hold data.