Apa iku API Resources?

Question

Accepted Answer

**API Resources** minangka kelas transformasi sing ngontrol carane Eloquent models (lan koleksi) **diserialisasi menyang JSON** kanggo API responses. Dheweke ngidini sampeyan mbentuk output API kanthi presisi — milih field mana sing bakal dibukak, nggantos jeneng, format nilai, lan nglibatake data sing ana hubungane — ngpisahake representasi API saka struktur database.

## Masalah: mbubuking raw models

```php
// ❌ returning a model directly exposes ALL columns (maybe including sensitive ones)
return User::find($id);   // { id, name, email, password_hash, internal_notes, ... } 😱
```

## Solusi: API Resource

```php
<?php
// php artisan make:resource UserResource
class UserResource extends JsonResource {
    public function toArray($request): array {
        return [
            'id' => $this->id,
            'name' => $this->name,
            'email' => $this->email,
            // password and internal fields deliberately OMITTED
            'joined' => $this->created_at->toDateString(),   // format a value
            'is_admin' => (bool) $this->is_admin,
            // include related data (conditionally loaded)
            'posts' => PostResource::collection($this->whenLoaded('posts')),
        ];
    }
}
```

```php
// use it in a controller
return new UserResource($user);                  // a single model
return UserResource::collection(User::all());     // a collection
```

Resource `toArray()` nemtokake cacah JSON sing tepat — sampeyan ngontrol field apa sing katon, nggantos jeneng lan format, lan nglibatake resources sing ana hubungane. Field sensitif ora kaasil.

## Data kondisional lan nested

```php
return [
    'id' => $this->id,
    'secret' => $this->when($request->user()->isAdmin(), $this->secret),  // conditional field
    'posts' => PostResource::collection($this->whenLoaded('posts')),       // only if eager-loaded
];
```

## Mengapa iki penting

API Resources penting kanggo mbangun API Laravel sing apik lan aman — dheweke menehi sampeyan kontrol presisi babagan output JSON, sing penting kanggo **keamanan** lan desain API.

Manfaat sing paling kritis yaiku **nyegah kebocoran data**: mbalekake Eloquent models langsung mbukak kabeh kolom (potensial kalebu password hashes, internal flags, utawa data sensitif liyane — kerentanan serius), dene API Resources ngidini sampeyan milih kanthi eksplisit field mana sing bakal dibukak, njamin data sensitif ora nganti mudhun menyang klien.

Saliyane keamanan, dheweke ngidini desain API sing bersih kanthi **ngpisahake representasi API saka skema database** — sampeyan bisa nggantos jeneng field, format nilai (tanggal, booleans), struktur data nested/sing ana hubungane, lan nglibatake field kanthi kondisional adhedhasar ijin, kabeh ana ing kelas transformasi khusus.

Iki njaga kontrak API tetep stabil lan niat tinimbang diikat karo struktur tabel internal.

Paham API Resources — carane mbentuk output JSON, manfaat keamanan saka kontrol field eksplisit, lan fitur-fitur kaya field kondisional lan resources nested — minangka kawruh penting kanggo mbangun API Laravel profesional, amarga mbubuking raw models ora aman lan desain sing curang.

Sajrone REST/JSON APIs minangka penggunaan primer Laravel saiki, lan sajrone ngontrol bentuk response (kanthi aman lan bersih) minangka kabutuhan umum, penting, API Resources minangka tools sing asring digunakake, berharga sing mbedakake API sing dibangun kanthi apik, aman saka sing kebocoran data utawa ikat rapet output menyang database.