WT Blog | 创意开发者作品集

参考：https://segmentfault.com/a/1190000012606246（主要）
https://www.cnblogs.com/agang-php/p/10480575.html
https://learnku.com/laravel/t/21265（报错）

今天自己尝试配置jwt，其实jwt我之前也有研究过具体看我这篇博文其实这个就是个帮你封装好的使用token的插件，俗称jwt

首先composer安装jwtcomposer require tymon/jwt-auth 1.0.0-rc.1 (可以把后面版本号去掉)
在config/app.php 文件的providers数组加入如下（扩展功能到你的应用程序）

Tymon\JWTAuth\Providers\LaravelServiceProvider::class,
在config生成配置文件jwt.php，执行命令php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\LaravelServiceProvider"
生成密钥php artisan jwt:secret
修改框架的登录验证方式，在config/auth.php 将guard-api-driver改为jwt，如下’guards’ => [
‘api’ => [
‘driver’ => ‘jwt’,
‘provider’ => ‘users’,
], ],

‘providers’ => [
‘users’ => [
‘driver’ => ‘eloquent’,
‘model’ => \App\Modules\User\Models\User::class,
],
],

新建User模型，这个就是我来操作我的users表的model

<?php namespace App\Modules\User\Models; 
Tymon\JWTAuth\Contracts\JWTSubject; use
Illuminate\Notifications\Notifiable; use
Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable implements JWTSubject {
    use Notifiable;
<span class="token keyword">protected</span> <span class="token variable">$fillable</span> <span class="token operator">=</span> <span class="token punctuation">[</span><span class="token single-quoted-string string">'username'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'password'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'phone'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'open_id'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'avatar'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'register_ip'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'city'</span><span class="token punctuation">]</span><span class="token punctuation">;</span>

<span class="token keyword">public</span> <span class="token keyword">function</span> <span class="token function">getJWTIdentifier</span><span class="token punctuation">(</span><span class="token punctuation">)</span>
<span class="token punctuation">{<!-- --></span>
    <span class="token comment">//  Implement getJWTIdentifier() method.</span>
    <span class="token keyword">return</span> <span class="token variable">$this</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">getKey</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
<span class="token punctuation">}</span>

<span class="token keyword">public</span> <span class="token keyword">function</span> <span class="token function">getJWTCustomClaims</span><span class="token punctuation">(</span><span class="token punctuation">)</span>
<span class="token punctuation">{<!-- --></span>
    <span class="token comment">// Implement getJWTCustomClaims() method.</span>
    <span class="token keyword">return</span> <span class="token punctuation">[</span><span class="token punctuation">]</span><span class="token punctuation">;</span>
<span class="token punctuation">}</span> <span class="token punctuation">}</span> ```

再写个中间件用来检测请求是否带着token，验证下

<?php namespace App</span>Http</span>Middleware; 
use
Illuminate</span>Support</span>Facades</span>Auth; use Closure; 
useTymon<span class="token package">JWTAuth</span>Exceptions</span>JWTException; use
Tymon</span>JWTAuth</span>Http</span>Middleware</span>BaseMiddleware; use
Tymon</span>JWTAuth</span>Exceptions</span>TokenExpiredException; use
Symfony</span>Component</span>HttpKernel</span>Exception</span>UnauthorizedHttpException;
class RefreshToken extends BaseMiddleware {
    public function handle($request, Closure $next)
    {
        // 检查此次请求中是否带有 token，如果没有则抛出异常
        $this->checkForToken($request);
        try{
            // 检测用户的登录状态，如果正常则通过
            if($this->auth->parseToken()->authenticate()){
            <span class="token keyword">return</span> <span class="token variable">$next</span><span class="token punctuation">(</span><span class="token variable">$request</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
        <span class="token punctuation">}</span>
        <span class="token keyword">throw</span> <span class="token keyword">new</span> <span class="token class-name">UnauthorizedHttpException</span><span class="token punctuation">(</span><span class="token single-quoted-string string">'jwt-auth'</span><span class="token punctuation">,</span> <span class="token single-quoted-string string">'未登录'</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
    <span class="token punctuation">}</span><span class="token keyword">catch</span> <span class="token punctuation">(</span><span class="token class-name">TokenExpiredException</span> <span class="token variable">$exception</span><span class="token punctuation">)</span><span class="token punctuation">{<!-- --></span>
        <span class="token keyword">try</span><span class="token punctuation">{<!-- --></span>
            <span class="token comment">// 刷新用户token，并放到头部</span>
            <span class="token variable">$token</span> <span class="token operator">=</span> <span class="token variable">$this</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token property">auth</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">refresh</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
            <span class="token comment">// 使用下一次性登录，保证这次成功进入</span>
            Auth<span class="token punctuation">:</span><span class="token punctuation">:</span><span class="token function">guard</span><span class="token punctuation">(</span><span class="token single-quoted-string string">'api'</span><span class="token punctuation">)</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">onceUsingId</span><span class="token punctuation">(</span><span class="token variable">$this</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token property">auth</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">manager</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">getPayloadFactory</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">buildClaimsCollection</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">toPlainArray</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token punctuation">[</span><span class="token single-quoted-string string">'sub'</span><span class="token punctuation">]</span><span class="token punctuation">)</span><span class="token punctuation">;</span>

        <span class="token punctuation">}</span><span class="token keyword">catch</span><span class="token punctuation">(</span>JWTException <span class="token variable">$exception</span><span class="token punctuation">)</span><span class="token punctuation">{<!-- --></span>
            <span class="token comment">// 如果到这，就是代表refresh也过期了，需要重新登录了</span>
            <span class="token keyword">throw</span> <span class="token keyword">new</span> <span class="token class-name">UnauthorizedHttpException</span><span class="token punctuation">(</span><span class="token single-quoted-string string">'jwt-auth'</span><span class="token punctuation">,</span> <span class="token variable">$exception</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">getMessage</span><span class="token punctuation">(</span><span class="token punctuation">)</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
        <span class="token punctuation">}</span>

        <span class="token comment">// 在响应头中返回新的token</span>
        <span class="token keyword">return</span> <span class="token variable">$this</span><span class="token operator">-</span><span class="token operator">&gt;</span><span class="token function">setAuthenticationHeader</span><span class="token punctuation">(</span><span class="token variable">$next</span><span class="token punctuation">(</span><span class="token variable">$request</span><span class="token punctuation">)</span><span class="token punctuation">,</span> <span class="token variable">$token</span><span class="token punctuation">)</span><span class="token punctuation">;</span>
    <span class="token punctuation">}</span>
<span class="token punctuation">}</span> <span class="token punctuation">}</span>

把刚刚新建的中间件加入到可被路径调用的，在App/Http/Kernel.php的$routeMiddleware数组加入'refresh.token' => RefreshToken::class,
api.php路径文件这样调用

Route::group(['prefix' => 'admin/auth', 'middleware' => ['refresh.token'] ], function () {

    Route::any('test', ['uses' => 'Admin\AuthController@test']); // 测试

});

新建个用户register

$params = [
            'username' => '小明',
            'password' => bcrypt('123456')
        ];
        $user = User::create($params); ```

登录验证返回token

php $token = Auth::guard('api')->attempt($params);
postman测试，如下图

laravel整合jwt使用