Laravel Tutorial: Complete CRUD System with RESTful APIs and JWT Authentication

Building modern web applications requires robust backend systems that handle data operations securely and efficiently. Laravel provides excellent tools for creating RESTful APIs with JWT authentication, making it perfect for developing scalable CRUD applications. This comprehensive guide walks you through building a complete product management system with authentication.

Environment Setup and Laravel Installation

Before starting, ensure you have PHP 8.1+ and Composer installed on your system. Create a new Laravel project using Composer:

composer create-project --prefer-dist laravel/laravel laravel-crud-api
cd laravel-crud-api
php artisan serve

Configure your database connection in the .env file with your database credentials. Laravel supports multiple database systems including MySQL, PostgreSQL, and SQLite.

Database Migration and Model Creation

Create a Product model with its corresponding migration file:

php artisan make:model Product -m

Define the product table structure in the migration file:

public function up()
{
    Schema::create(\'products\', function (Blueprint $table) {
        $table->id();
        $table->string(\'name\');
        $table->text(\'description\');
        $table->decimal(\'price\', 8, 2);
        $table->integer(\'quantity\');
        $table->timestamps();
    });
}

Configure the Product model with fillable attributes:

protected $fillable = [
    \'name\', \'description\', \'price\', \'quantity\'
];

JWT Authentication Implementation

Install the JWT authentication package:

composer require tymon/jwt-auth
php artisan vendor:publish --provider="Tymon\\JWTAuth\\Providers\\LaravelServiceProvider"
php artisan jwt:secret

Update the User model to implement JWT authentication:

use Tymon\\JWTAuth\\Contracts\\JWTSubject;

class User extends Authenticatable implements JWTSubject
{
    public function getJWTIdentifier()
    {
        return $this->getKey();
    }

    public function getJWTCustomClaims()
    {
        return [];
    }
}

Create an authentication controller for user login and registration:

php artisan make:controller AuthController

API Routes Configuration

Define your API routes in routes/api.php:

Route::post(\'register\', [AuthController::class, \'register\']);
Route::post(\'login\', [AuthController::class, \'login\']);

Route::middleware(\'auth:api\')->group(function () {
    Route::apiResource(\'products\', ProductController::class);
    Route::post(\'logout\', [AuthController::class, \'logout\']);
});

This configuration protects the product routes with JWT authentication while allowing public access to registration and login endpoints.

Building the Product Controller

Generate the API controller with resource methods:

php artisan make:controller ProductController --api --model=Product

Implement the CRUD operations in the controller:

public function index()
{
    $products = Product::all();
    return response()->json($products);
}

public function store(Request $request)
{
    $request->validate([
        \'name\' => \'required|string|max:255\',
        \'description\' => \'required|string\',
        \'price\' => \'required|numeric|min:0\',
        \'quantity\' => \'required|integer|min:0\'
    ]);

    $product = Product::create($request->all());
    return response()->json($product, 201);
}

public function show(Product $product)
{
    return response()->json($product);
}

public function update(Request $request, Product $product)
{
    $request->validate([
        \'name\' => \'sometimes|string|max:255\',
        \'description\' => \'sometimes|string\',
        \'price\' => \'sometimes|numeric|min:0\',
        \'quantity\' => \'sometimes|integer|min:0\'
    ]);

    $product->update($request->all());
    return response()->json($product);
}

public function destroy(Product $product)
{
    $product->delete();
    return response()->json(null, 204);
}

Request Validation and Error Handling

Laravel\'s built-in validation provides robust data validation. Create custom form request classes for complex validation rules:

php artisan make:request StoreProductRequest

Implement proper error handling with meaningful HTTP status codes and JSON responses. Use Laravel\'s exception handler to manage API errors consistently across your application.

Authentication Controller Implementation

Build the authentication methods in your AuthController:

public function login(Request $request)
{
    $credentials = $request->validate([
        \'email\' => \'required|email\',
        \'password\' => \'required|string\'
    ]);

    if (!$token = auth()->attempt($credentials)) {
        return response()->json([\'error\' => \'Unauthorized\'], 401);
    }

    return response()->json([
        \'access_token\' => $token,
        \'token_type\' => \'bearer\',
        \'expires_in\' => auth()->factory()->getTTL() * 60
    ]);
}

For enhanced security, consider implementing VPS hosting solutions that provide better control over your server environment and security configurations.

API Testing and Documentation

Test your API endpoints using tools like Postman or curl. Here\'s the complete endpoint structure:

Document your API using tools like L5-Swagger to generate interactive API documentation automatically from your code annotations.

Performance Optimization and Security Best Practices

Implement caching strategies for frequently accessed data using Laravel\'s caching system. Add rate limiting to prevent API abuse:

Route::middleware([\'auth:api\', \'throttle:60,1\'])->group(function () {
    Route::apiResource(\'products\', ProductController::class);
});

Use Laravel\'s built-in CORS support and configure proper headers for production deployment. Consider implementing API versioning for future-proof development.

For production deployment, reliable hosting solutions ensure your Laravel application runs smoothly with proper PHP and database support.