What is the best way to implement REST API authentication?

Question

symfony

Good afternoon,
the task is to write a rest api for an application whose front-end is on Vue, the back-end is on Symfony4
How best to implement API request authentication to prevent requests from being executed by unauthorized users or users who do not have rights to do so.
I mean not ready-made solutions, but some technologies or methods, maybe there are some vendors in Sf for this?

Answer 1

I am actively using OIDC + JWT. Auth0 suited me, but if you go beyond the limits, it turns out not very cheap

Answer 2

You can create a subscriber to kernel.request and expand on this idea:

public function onKernelRequest(GetResponseEvent $event)
    {
        if (false !== strpos($event->getRequest()->getRequestUri(), '/api/')) {
            if (!$this->security->isGranted('ROLE_USER')) {
                throw new NotFoundHttpException();
            }
        }
    }

You can also use the FOSRestBundle