Laravel is a free open-source framework for PHP, which was created by Taylor Otwell, had its first beta release on 9 June 2011. It follows the Model-View-Controller(MVC) architectural pattern and is built on top of the already battle tested Symfony packages.
Laravel was created with the aim of being a more advanced alternative to the Codeigniter framework which did not have built-in support for user authentication and authorization.
The integration of Approov within a PHP Laravel API server will ensure that your API can only be accessed by genuine instances of your mobile app. Scripts and bots will be blocked. This is achieved by adding the Approov SDK to your mobile app and does not require you to change a single line of code in the API itself. Implementing the Approov Token check in your PHP code couldn’t be easier because the token is a regular signed JWT. All you need is to use thefirebase/php-jwt package to check the expiry time and verify the signature with the secret known only by your PHP Laravel API server and the Approov cloud service.
To enhance the protection of your Laravel API further, you can secure each request by using the Approov Token Binding advanced feature of Approov. This allows you to check the binding of a header in the request with the Approov token itself, for example, the user authentication header.
Please follow one of the Quickstart guides in the repo to learn how to integrate Approov into your current PHP Laravel project.
If you have any questions around why or how to use Approov in your PHP Laravel project, don’t hesitate to contact us.