{
  "data": {
    "id": 1,
    "title": "RESTful API with Laravel Framework",
    "description": "...",
    "author": {
      "id": 2580,
      "name": "Nirusduddin Mateh"
    }
  }
}

// การจับคู่ HTTP Method กับการจัดการบทความ (Blogs)
// GET    /api/blogs        -> ดึงรายการบทความทั้งหมด
// GET    /api/blogs/{id}   -> ดึงข้อมูลบทความตาม ID
// POST   /api/blogs        -> สร้างบทความใหม่
// PUT    /api/blogs/{id}   -> แก้ไขบทความเดิม
// DELETE /api/blogs/{id}   -> ลบบทความทิ้ง

// ตัวอย่าง HTTP Request Headers ในการเรียกใช้ RESTful API
POST /api/blogs HTTP/1.1
Host: 127.0.0.1:8000
Accept: application/json
Content-Type: application/json
Authorization: Bearer 1|a8f9c7e2b3d4...

{
  "title": "เรียนรู้ RESTful API",
  "content": "เนื้อหาบทความใหม่"
}

# ติดตั้ง API Scaffolding และ Sanctum
php artisan install:api

# ผลลัพธ์ที่ระบบดำเนินการ:
# - One new database migration has been published.
# - The [routes/api.php] file has been published.
# - Laravel Sanctum installed successfully.

// app/Models/User.php
namespace App\Models;

use Laravel\Sanctum\HasApiTokens;
use Illuminate\Notifications\Notifiable;
use Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable
{
    use HasApiTokens, Notifiable;
    
    protected $fillable = [
        'name',
        'email',
        'password',
    ];

    protected $hidden = [
        'password',
        'remember_token',
    ];
}

# สั่งรัน Migration สร้างตาราง Tokens
php artisan migrate

# โครงสร้างตาราง personal_access_tokens:
# - id (bigint unsigned)
# - tokenable_type (App\Models\User)
# - tokenable_id (User ID)
# - name (เช่น myapptoken)
# - token (SHA-256 hash ของโทเค็น)
# - abilities (สิทธิ์การเข้าถึง เช่น [___STRING_0___])
# - last_used_at (เวลาที่ใช้ล่าสุด)
# - created_at & updated_at

# สร้าง Controller ในโฟลเดอร์ย่อย Api/
php artisan make:controller Api/AuthController

# ไฟล์จะถูกสร้างขึ้นที่:
# app/Http/Controllers/Api/AuthController.php

// app/Http/Controllers/Api/AuthController.php
namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;

class AuthController extends Controller
{
    public function register(Request $request)
    {
        $fields = $request->validate([
            'name' => 'required|string|max:255',
            'email' => 'required|string|email|unique:users,email',
            'password' => 'required|string|confirmed|min:6'
        ]);

        $user = User::create([
            'name' => $fields['name'],
            'email' => $fields['email'],
            'password' => Hash::make($fields['password']),
        ]);

        $token = $user->createToken('myapptoken')->plainTextToken;

        return response()->json([
            'status' => 'success',
            'message' => 'ลงทะเบียนสำเร็จเรียบร้อย',
            'user' => $user,
            'token' => $token
        ], 201);
    }
}

<?php

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\Api\AuthController;

Route::get('/user', function (Request $request) {
    return $request->user();
})->middleware('auth:sanctum');

Route::post('/register', [AuthController::class, 'register']);

// app/Http/Controllers/Api/AuthController.php
public function login(Request $request)
{
    $fields = $request->validate([
        'email' => 'required|string|email',
        'password' => 'required|string'
    ]);

    $user = User::where('email', $fields['email'])->first();

    // ตรวจสอบว่ามี User และ Password ตรงกันหรือไม่
    if (!$user || !Hash::check($fields['password'], $user->password)) {
        return response()->json([
            'status' => 'error',
            'message' => 'อีเมลหรือรหัสผ่านไม่ถูกต้อง'
        ], 401);
    }

    $token = $user->createToken('myapptoken')->plainTextToken;

    return response()->json([
        'status' => 'success',
        'message' => 'เข้าสู่ระบบสำเร็จ',
        'user' => $user,
        'token' => $token
    ], 200);
}

<?php

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\Api\AuthController;

Route::get('/user', function (Request $request) {
    return $request->user();
})->middleware('auth:sanctum');

Route::post('/register', [AuthController::class, 'register']);
Route::post('/login', [AuthController::class, 'login']);

// app/Http/Controllers/Api/AuthController.php
public function logout(Request $request)
{
    // ลบเฉพาะ Token ปัจจุบันที่ใช้เรียก API นี้
    $request->user()->currentAccessToken()->delete();

    return response()->json([
        'status' => 'success',
        'message' => 'ออกจากระบบเรียบร้อยแล้ว (Token ถูกยกเลิก)'
    ], 200);
}

<?php

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\Api\AuthController;

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/user', function (Request $request) {
        return $request->user();
    });
    Route::post('/logout', [AuthController::class, 'logout']);
});

Route::post('/register', [AuthController::class, 'register']);
Route::post('/login', [AuthController::class, 'login']);

# สร้าง API Resource
php artisan make:resource BlogResource

# ไฟล์จะอยู่ที่:
# app/Http/Resources/BlogResource.php

// app/Http/Resources/BlogResource.php
namespace App\Http\Resources;

use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\JsonResource;

class BlogResource extends JsonResource
{
    public function toArray(Request $request): array
    {
        return [
            'id' => $this->id,
            'title' => $this->title,
            'content' => $this->content,
            'status' => (bool) $this->status,
            'created_at' => $this->created_at ? $this->created_at->format('Y-m-d H:i:s') : null,
            'updated_at' => $this->updated_at ? $this->updated_at->format('Y-m-d H:i:s') : null,
        ];
    }
}

# สร้าง API Resource Controller
php artisan make:controller Api/BlogController --api

# เมธอดที่ได้:
# - index()   : GET /api/blogs
# - store()   : POST /api/blogs
# - show()    : GET /api/blogs/{id}
# - update()  : PUT/PATCH /api/blogs/{id}
# - destroy() : DELETE /api/blogs/{id}

// app/Http/Controllers/Api/BlogController.php
namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Models\Blog;
use App\Http\Resources\BlogResource;
use Illuminate\Http\Request;

class BlogController extends Controller
{
    // GET /api/blogs
    public function index()
    {
        $blogs = Blog::latest()->paginate(10);
        return BlogResource::collection($blogs);
    }

    // POST /api/blogs
    public function store(Request $request)
    {
        $request->validate([
            'title' => 'required|string|max:255',
            'content' => 'required|string'
        ]);

        $blog = Blog::create([
            'title' => $request->title,
            'content' => $request->content,
            'status' => true
        ]);

        return (new BlogResource($blog))
            ->response()
            ->setStatusCode(201);
    }
}

// app/Http/Controllers/Api/BlogController.php
// GET /api/blogs/{id}
public function show($id)
{
    $blog = Blog::findOrFail($id);
    return new BlogResource($blog);
}

// PUT /api/blogs/{id}
public function update(Request $request, $id)
{
    $blog = Blog::findOrFail($id);
    
    $request->validate([
        'title' => 'sometimes|required|string|max:255',
        'content' => 'sometimes|required|string'
    ]);

    $blog->update($request->all());
    return new BlogResource($blog);
}

// DELETE /api/blogs/{id}
public function destroy($id)
{
    $blog = Blog::findOrFail($id);
    $blog->delete();

    return response()->json([
        'status' => 'success',
        'message' => 'ลบบทความเรียบร้อยแล้ว'
    ], 200);
}

// routes/api.php
use App\Http\Controllers\Api\AuthController;
use App\Http\Controllers\Api\BlogController;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;

// 1. Public Routes
Route::post('/register', [AuthController::class, 'register']);
Route::post('/login', [AuthController::class, 'login']);
Route::get('/blogs', [BlogController::class, 'index']);
Route::get('/blogs/{id}', [BlogController::class, 'show']);

// 2. Protected Routes (ต้องแนบ Bearer Token)
Route::middleware('auth:sanctum')->group(function () {
    Route::get('/user', function (Request $request) {
        return $request->user();
    });
    Route::post('/logout', [AuthController::class, 'logout']);
    Route::post('/blogs', [BlogController::class, 'store']);
    Route::put('/blogs/{id}', [BlogController::class, 'update']);
    Route::delete('/blogs/{id}', [BlogController::class, 'destroy']);
});

// 1. ติดตั้ง API Scaffolding & รัน Migration
php artisan install:api
php artisan migrate

// 2. สร้าง Controllers & Resource
php artisan make:controller Api/AuthController
php artisan make:controller Api/BlogController --api
php artisan make:resource BlogResource

// 3. รัน Server สำหรับให้บริการ API บน Port 8000
php artisan serve