api/users에 POST User 를 추가하는 것을 구현해 보겠습니다.

public function store(Request $request)

{

    $rules = [

        'name' => 'required',

        'nickname' => 'required',

        'email' => 'required|email|unique:users',

        'password' => 'required|min:6|confirmed'

    ];

    $this->validate($request, $rules);

    $data = $request->all();

    $data['password'] = bcrypt($request->passwrod);

    $user = User::create($data);

    return response()->json(['data' => $user], 201);

}

Response code 201의 의미는  https://restfulapi.net/http-status-201-created/

HTTP Response Codes

• 200 (OK)
• 201 (Created)
• 202 (Accepted)
• 204 (No Content)

App/User.php에도  $fillable은 mass assignment 라고 하네요.  여기참조

protected $fillable = [

    'name', 'nickname', 'email', 'password',

];

Blacklist 와 whitelist 등 어렵네요.  https://www.owasp.org/index.php/Mass_Assignment_Cheat_Sheet