Это пробный урок. Оформите подписку, чтобы получить доступ ко всем материалам курса. Премиум

  1. Урок 1. 00:01:24
    Introduction and welcome: how to get the most out of the course
  2. Урок 2. 00:01:27
    Install a package with a web server, PHP, a database server and phpMyAdmin
  3. Урок 3. 00:00:52
    Install Composer: manage third-party packages and autoload class files
  4. Урок 4. 00:03:58
    What is an API?
  5. Урок 5. 00:02:57
    Make an API call: access an API from PHP
  6. Урок 6. 00:04:00
    Decode API results: reading JSON in PHP
  7. Урок 7. 00:04:13
    Use API data in a web application
  8. Урок 8. 00:05:02
    Use cURL instead of file_get_contents to make an API request
  9. Урок 9. 00:05:09
    Response codes: get the HTTP status code
  10. Урок 10. 00:03:49
    Request headers: add meta data about the request
  11. Урок 11. 00:02:56
    Response headers: read meta data about the response
  12. Урок 12. 00:03:55
    Get all individual response headers in an array
  13. Урок 13. 00:03:25
    Use an API that requires a specific request header
  14. Урок 14. 00:03:44
    Request method: change the method to get a different result with the same URL
  15. Урок 15. 00:03:33
    Request body: add a payload to send data along with the request
  16. Урок 16. 00:03:41
    REST and RESTful APIs: what are they?
  17. Урок 17. 00:03:52
    Access a RESTful API in PHP with cURL
  18. Урок 18. 00:05:07
    Use the Guzzle HTTP client for object-oriented API code
  19. Урок 19. 00:05:41
    Use an SDK: compare the Stripe API to its SDK
  20. Урок 20. 00:03:31
    Start writing the API: enable URL rewriting
  21. Урок 21. 00:04:19
    The front controller: get the resource, ID and the request method
  22. Урок 22. 00:03:42
    Use a client for API development: cURL, Postman or HTTPie
  23. Урок 23. 00:04:23
    Set the HTTP status code: best practices
  24. Урок 24. 00:04:44
    Add a controller class to decide the response
  25. Урок 25. 00:02:56
    Use Composer's autoloader to load classes automatically
  26. Урок 26. 00:03:22
    Make debugging easier: add type declarations and enable strict type checking
  27. Урок 27. 00:05:36
    Always return JSON: add a generic exception handler and JSON Content-Type header
  28. Урок 28. 00:04:42
    Send a 405 status code and Allow header for invalid request methods
  29. Урок 29. 00:02:11
    Create a new database and a database user to access it
  30. Урок 30. 00:01:34
    Create a table to store resource data
  31. Урок 31. 00:04:39
    Connect to the database from PHP: add a Database class
  32. Урок 32. 00:04:08
    Move the database connection data to a separate .env file
  33. Урок 33. 00:03:39
    Create a table data gateway class for the resource table
  34. Урок 34. 00:03:18
    Show a list of all records
  35. Урок 35. 00:02:34
    Configure PDO to prevent numeric values from being converted to strings
  36. Урок 36. 00:02:39
    Convert database booleans to boolean literals in the JSON
  37. Урок 37. 00:02:56
    Show an individual record
  38. Урок 38. 00:03:58
    Respond with 404 if the resource with the specified ID is not found
  39. Урок 39. 00:05:34
    Get the data from the request as JSON
  40. Урок 40. 00:05:06
    Insert a record into the database and respond with a 201 status code
  41. Урок 41. 00:02:53
    Add a generic error handler to output warnings as JSON
  42. Урок 42. 00:04:37
    Validate the data and respond with a 422 status code if invalid
  43. Урок 43. 00:03:18
    Conditionally validate the data when updating an existing record
  44. Урок 44. 00:04:51
    Get the data from the request for updating an existing record
  45. Урок 45. 00:05:40
    Update the record in the database and return a 200 status code
  46. Урок 46. 00:02:25
    Delete the record in the database and return a 200 status code
  47. Урок 47. 00:03:41
    Create a table to store user account data
  48. Урок 48. 00:06:11
    Add a register page to insert a new user record and generate a new API key
  49. Урок 49. 00:03:05
    Send the API key with the request: query string or request header
  50. Урок 50. 00:01:44
    Check the API key is present in the request and return 400 if not
  51. Урок 51. 00:02:30
    Create a table data gateway class for the user table
  52. Урок 52. 00:02:17
    Authenticate the API key and return a 401 status code if invalid
  53. Урок 53. 00:04:46
    Refactor the front controller to a bootstrap file and Auth class
  54. Урок 54. 00:02:11
    Add a foreign key relationship to link task records to user records
  55. Урок 55. 00:02:25
    Retrieve the ID of the authenticated user when authenticating
  56. Урок 56. 00:02:30
    Restrict the tasks index endpoint to only show the authenticated user's tasks
  57. Урок 57. 00:04:32
    Restrict the rest of the task endpoints to the authenticated user's tasks
  58. Урок 58. 00:02:04
    Cache the database connection to avoid multiple connections in the same request
  59. Урок 59. 00:02:28
    An introduction to authentication using access tokens
  60. Урок 60. 00:03:19
    Create the login script and return 400 if the username and password are missing
  61. Урок 61. 00:02:52
    Select the user record based on the username in the request
  62. Урок 62. 00:02:24
    Check the username and password and return a 401 status code if invalid
  63. Урок 63. 00:03:34
    Generate an encoded access token containing the user details
  64. Урок 64. 00:05:20
    Pass the access token to the task API endpoints in the authorization header
  65. Урок 65. 00:05:36
    Validate the access token and decode its contents
  66. Урок 66. 00:04:04
    Get the authenticated user data from the access token
  67. Урок 67. 00:03:49
    An introduction to JSON web tokens (JWTs)
  68. Урок 68. 00:05:16
    Create a class to encode a payload in a JWT
  69. Урок 69. 00:02:20
    Generate a JWT access token in the login endpoint containing JWT claims
  70. Урок 70. 00:05:35
    Add a method to decode the payload from the JWT
  71. Урок 71. 00:01:52
    Pass in the secret key used for hashing as a dependency
  72. Урок 72. 00:03:41
    Authenticate the task endpoints using the JWT
  73. Урок 73. 00:02:30
    Use a custom exception class to return 401 if the signature is invalid
  74. Урок 74. 00:02:55
    Don't store sensitive data in the JWT
  75. Урок 75. 00:03:13
    Why access tokens need to expire and how to refresh them in a user-friendly way
  76. Урок 76. 00:02:15
    Add an expiry claim to the access token payload when logging in
  77. Урок 77. 00:02:20
    Throw a custom exception to not accept the JWT if it has expired
  78. Урок 78. 00:02:07
    Issue a refresh token in addition to the access token when logging in
  79. Урок 79. 00:03:42
    Add a refresh endpoint and validate the refresh token in the request
  80. Урок 80. 00:03:12
    Validate the user in the refresh token using the database
  81. Урок 81. 00:02:26
    Issue a new access token and refresh token to the authenticated user
  82. Урок 82. 00:02:20
    Create a table to store a refresh token whitelist
  83. Урок 83. 00:03:49
    Store the refresh token in the whitelist when issued in the login endpoint
  84. Урок 84. 00:02:51
    Replace the refresh token in the whitelist when issued in the refresh endpoint
  85. Урок 85. 00:03:16
    Validate the refresh token is on the whitelist and return a 400 response if not
  86. Урок 86. 00:04:19
    Add a logout endpoint to remove the an active refresh token from the whitelist
  87. Урок 87. 00:03:53
    Add a script to clear out expired refresh tokens from the whitelist
  88. Урок 88. 00:03:35
    See how a single-page application interacts with the API using access tokens
  89. Урок 89. 00:01:22
    Conclusion & where to go from here