bas652
Hi Everyone!
I’m still new to the Elixir and Phoenix world, so I’m trying to make an API as a learning project, but in the end I got a bit confused while trying to work out an authentication flow with Guardian. In the end I managed to create a working prototype (without token revocation but I plan on building it later), but I am not sure if my code follows best practices, and would love some advice if someone is willing to review it. The most confusing thing was the pipeline and the error handling for me, so if somebody takes a look on that, that’s a great help already
All feedback is greatly appreciated! I made a PR for myself on github, you can take a look at it here:
https://github.com/blascsi/redoist-backend/pull/1
Where Next?
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Courses that'll move you from confusion to "Aha, now I get it!"
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #ai
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #blog-post
- #elixirconf-us
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #elixirconf-eu
- #api
- #forms
- #security
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Practical resources that improve the lives of professional developers.
Master modern tools, write cleaner code, and tackle real-world challenges.
**Building the future of software with AI, trust, and human connection.**
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 2- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
OvermindDL1
Guardian is designed for tokens specifically that don’t hit the database, I.E. it makes no sense for it to have revocation, rather a very short timeout between non-communicating servers is their general use, not single server API’s. It sounds like you just want to use normal
Phoenix.Token’s.siddhant3030
I think this can help you. Let me know if you’re stuck somewhere
https://medium.com/@njwest/jwt-auth-with-an-elixir-on-phoenix-1-3-guardian-api-and-react-native-mobile-app-1bd00559ea51