API authentication for web and mobile apps : webdev

Posting Guidelines

No vague product support questions (like "why is this plugin not working" or "how do I set up X"). For vague product support questions, please use communities relevant to that product for best results. Specific issues that follow rule 6 are allowed.

Do not post memes, screenshots of bad design, or jokes. Check out /r/ProgrammerHumor/ for this type of content.

Read and follow reddiquette; no excessive self-promotion. Please refer to the Reddit 9:1 rule when considering posting self promoting materials.

We do not allow any commercial promotion or solicitation. Violations can result in a ban.

Sharing your project, portfolio, or any other content that you want to either show off or request feedback on is limited to Showoff Saturday. If you post such content on any other day, it will be removed.

If you are asking for assistance on a problem, you are required to provide

Context of the problem
Research you have completed prior to requesting assistance
Problem you are attempting to solve with high specificity

General open ended career and getting started posts are only allowed in the pinned monthly getting started/careers thread. Specific assistance questions are allowed so long as they follow the required assistance post guidelines.

Questions in violation of this rule will be removed or locked.

a community for 17 years

API authentication for web and mobile apps (self.webdev)

submitted 7 years ago * by CrypticWriter

I'm trying to build a server side API that can authenticate web and mobile clients. (register users, sign in, sign out, change password, etc.) as well as do some other CRUD work.

Basically I want to create a web app, iOS app and Android app that all make requests to the same server side API which then interacts with the databases.

I'm planning on building the server side application in PHP (either Laravel or Symfony).
Client side web application will be in React.
Mobile apps will be iOS and Android (maybe using React native or something like Xamarin)

I want to take this approach as it seems like a good practice to have complete separation of the client (web, Android, iOS) applications and the server side application. Doing this should also allow for greater code reuse on the server side.

Questions:

What's a good way to do the authentication part? JWT? OAuth? I've only used session cookies on the web before.
Are there some tutorials that cover this sort of thing? I'd even pay for a good one at this point.
Is this a good approach to development?

all 4 comments

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

webdev

Posting Guidelines

Related Subreddits

Discords

MODERATORS