secure-api

Repository for the "Building a Secure API" series on Websec.io

To use this project

1. Clone the repository:

git clone git@github.com:psecio/secure-api.git

2. Change over to the public/ directory
3. Use the built-in PHP web server to handle requests

php -S localhost:8000

Then go to http://localhost:8000 in a browser to view the result.

Test client

The file test-client.php contains an example of the HTTP client making a request to the API key with the flow created in the tutorial series. You'll need to install Guzzle to have it work correctly. Install it via Composer with:

composer require guzzlehttp/guzzle

Then you can run it with: php test-client.php. If all goes well you should get the "validation success" message back from the last call to the API.

The Series

• Part 1
• Part 2
• Part 3
• Part 4
• Part 5