January 2025 Summaries

Major upgrades to API keys in 2025 will enhance user and organizational capabilities by allowing the generation of API keys for various applications, such as creating a public-facing API, non-web app authentication, and internal machine requests. These improvements provide deeper insights into API key usage through detailed usage charts, allowing breakdowns per user, organization, or individual key. Users can now enforce custom rate limits to prevent abuse and manage enthusiastic customers, while proactive notifications will alert customers about impending API key expirations, ensuring continuous service without interruptions.

Laravel, a PHP-based web application framework renowned for its elegant and clean developer experience, offers robust functionalities such as validation, object storage, and database migration support. The article explores expanding Laravel's authentication and authorization capabilities to include Enterprise Single Sign-On (SSO) using PropelAuth, which allows users to log in with their existing work accounts from services like Okta and Azure. Enterprise SSO is distinct from social logins as it requires per-customer setup and is often essential for B2B applications. The integration process involves setting up two endpoints for redirect and callback, configuring PropelAuth, and modifying the login UI to redirect users appropriately. PropelAuth simplifies the setup by guiding users through the onboarding process, ensuring they can log in with their work credentials. This integration seamlessly works with Laravel's built-in authentication features, supporting a streamlined and secure access experience for enterprise users.