Proper way handle different auth

[harryqt]

I have an api, where some endpoints require "x-api-key" based auth, some require JWT based auth, some don't require any.

I'm trying to figure out how I should structure them, any recommendation?

[Sammyjo20]

Hey @Dibbyo456

You could pass in the requirements on a per-request basis into the constructor of the request and then setting the headers based on the request.

class SomeRequest extends Request
{
     public function __construct(string $apiKey)
     {
            $this->headers()->add('X-API-KEY', $apiKey);
     }
}

You could also make your own custom authenticators if you have multiple routes that require JWT/X-API-KEY

class SomeRequest extends Request
{
     protected function defaultAuth()
     {
           return new JwtAuthenticator($this->token);
     }
}