laravel 使用JWT实现用户认证

在laravel使用Token进行用户认证

首先先安装拓展包

composer require tymon/jwt-auth 0.5.*

然后在配置中注册

Tymon\JWTAuth\Providers\JWTAuthServiceProvider::class
.....
'JWTAuth' => Tymon\JWTAuth\Facades\JWTAuth::class
'JWTFactory' => Tymon\JWTAuth\Facades\JWTFactory::class

发布配置文件生成密钥

php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\JWTAuthServiceProvider"
php artisan jwt:generate

然后创建注册和登录路由

/routes/web.php

Route::post('/register', 'Auth\RegisterController@register');
Route::post('/login','Auth\LoginController@email');

去控制器创建注册用户方法

app/Http/Controllers/Auth/RegisterController.php
protected function create(array $data){}
public function register(Request $request)
{
$this->validator($request->all())->validate();
//验证的规则

$user = $this->create($request->all());//存数据到数据库
$token = JWTAuth::fromUser($user);
//通过用户对象实例创建token
return ["token" => $token];
}

接下来创建登录的方法,这里我是用邮箱登录

app/Http/Controllers/Auth/LoginController.php

public function email(Request $request)
{
// grab credentials from the request
$credentials = $request->only('email', 'password');

try {
// attempt to verify the credentials and create a token for the user
if (! $token = JWTAuth::attempt($credentials)) {
return response()->json(['error' => 'invalid_credentials'], 401);
}
} catch (JWTException $e) {
// something went wrong whilst attempting to encode the token
return response()->json(['error' => 'could_not_create_token'], 500);
}

// all good so return the token
return response()->json(compact('token'));
}

之后就会得到

{

“token”:”eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxIiwiaXNzIjoiaHR0cDpcL1wvbG9jYWx

ob3N0OjgwMDFcL2F1dGhcL2xvZ2luIiwiaWF0IjoxNDUxODg4MTE5LCJleHAiOjE0NTQ1MTYxMTksIm5iZiI6MTQ1MTg4OD

}

token可以设置Authorization头来使用：

Authorization: Bearer {yourtokenhere}

也可以放进URL中使用

http://localhost:8001?token={yourtokenhere}

用户完成登录注册之后就可以设置需要登录后才能访问的路由,首先到

app/Http/Kernel.php

protected $routeMiddleware = [
...
'jwt.auth' => 'Tymon\JWTAuth\Middleware\GetUserFromToken',
'jwt.refresh' => 'Tymon\JWTAuth\Middleware\RefreshToken',
];

然后就是设置路由

routes/web.php

Route::group(['middleware' => 'jwt.auth', 'providers' => 'jwt'], function () {
Route::post('/test', 'TestController@test');
});

这样就代表在访问/test路由的时候需要带有token,登录才能访问

而获取用户信息则可以在TestController中的test方法中采用

$user = JWTAuth::parseToken()->authenticate();//获取用户信息