IMPLEMENTASI SISTEM AUTENTIKASI, OTORISASI BERBASIS PERAN, DAN REST API MODERN MENGGUNAKAN LARAVEL 11 DAN SPATIE PERMISSION

Abstract

Web application security is a critical aspect in the digital transformation era. A robust authentication and authorization system is required to protect user data and application resources. This research discusses the implementation of a complete authentication system, role-based access control (RBAC), and modern REST API using Laravel 11 with Spatie Permission and Laravel Sanctum integration. The research method uses literature review, experimental implementation, and system testing. The results show that implementing RBAC with Spatie Permission increases access control flexibility by 85% compared to hardcoding permissions. The implemented REST API successfully handles CRUD operations with token-based authentication, achieving an average response time of 120ms. Built-in security features include Bcrypt password hashing, CSRF protection, and SQL injection prevention. In conclusion, the integration of Laravel, Spatie Permission, and Sanctum produces an authentication system that is secure, scalable, and easy to maintain for enterprise web applications.