I;m using laravel 10.10 and tymon/jwt-auth library.
I have some routes that need to be auth token and some of my routes don’t need it (for example to get cities api).
I want to show 403 status header code when the user needs a token and it’s expired.

I’m using tymon/jwt-auth library.
I have some routes that need to be auth token and some of my routes don’t need it (for example to get cities api).
I want to show 403 status header code when the user needs a token and it’s expired.

есть задача разработать приложение, где должна присутствовать авторизация пользователя. Выбираю между JWT и Laravel Sanctum. Углубившись в тему понял как работает JWT, но не могу понять как работает Sanctum. Не пойму также почему кто-то говорит, что Sanctum безопаснее, чем JWT.

I’m working on a Laravel project and trying to implement JWT authentication using the php-open-source-saver/jwt-auth package and I’m having an issue when attempting to generate a token.

I wonder how refresh work in https://packagist.org/packages/php-open-source-saver/jwt-auth. What I know about JWT is that when a user logs in, the system should give them an access token and a refresh token.