laravel5.5.40使用jwt做权限认证

# 一、运行composer 加载依赖包
```
composer require tymon/jwt-auth 1.0.0-rc.1
```
![](https://cos.cc430.cn/2018/05/19/1526712442.png)
# 二、发布jwt配置文件
```
php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\LaravelServiceProvider"
```
这条命令会在 config 目录创建jwt.php配置文件
![](https://cos.cc430.cn/2018/05/19/1526712507.png)

# 三、生成秘钥
```
php artisan jwt:secret
```
![](https://cos.cc430.cn/2018/05/19/1526712532.png)

# 四、修改config/auth.php文件
```
<?php
return [
    'defaults' => [
        'guard' => 'api',
        'passwords' => 'users',
    ],

'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

'api' => [
            'driver' => 'jwt',
            'provider' => 'users',
        ],
    ],
    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\User::class,
        ],

// 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

/*
    |--------------------------------------------------------------------------
    | Resetting Passwords
    |--------------------------------------------------------------------------
    |
    | You may specify multiple password reset configurations if you have more
    | than one user table or model in the application and you want to have
    | separate password reset settings based on the specific user types.
    |
    | The expire time is the number of minutes that the reset token should be
    | considered valid. This security feature keeps tokens short-lived so
    | they have less time to be guessed. You may change this as needed.
    |
    */

'passwords' => [
        'users' => [
            'provider' => 'users',
            'table' => 'password_resets',
            'expire' => 60,
        ],
    ],

];

```

# 五、修改app/User.php模型文件
修改User.php文件成如下所示
```
<?php

namespace App;

use Tymon\JWTAuth\Contracts\JWTSubject;
use Illuminate\Notifications\Notifiable;
use Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable implements JWTSubject
{
    use Notifiable;

/**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'name', 'email', 'password',
    ];
    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password', 'remember_token',
    ];

public function getJWTIdentifier()
    {
        return $this->getKey();
    }

public function getJWTCustomClaims()
    {
        return [];
    }
}
```

# 六、自定义认证中间件
```
php artisan make:middleware RefreshToken
```
修改App\Http\Middleware\RefreshToken.php
```php
<?php
namespace App\Http\Middleware;

use JWTAuth;
use Illuminate\Support\Facades\Auth;
use Closure;
use Tymon\JWTAuth\Exceptions\JWTException;
use Tymon\JWTAuth\Http\Middleware\BaseMiddleware;
use Tymon\JWTAuth\Exceptions\TokenExpiredException;
use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
use Carbon\Carbon;
use Illuminate\Support\Facades\Cache;
// 注意，我们要继承的是 jwt 的 BaseMiddleware
class RefreshToken extends BaseMiddleware
{
    public function handle($request, \Closure $next) {

$this->checkForToken($request); // Check presence of a token.

try {
            if (!$this->auth->parseToken()->authenticate()) { // Check user not found. Check token has expired.
                throw new UnauthorizedHttpException('jwt-auth', 'User not found');
            }
            return $next($request); // Token is valid. User logged. Response without any token.
        } catch (TokenExpiredException $t) { // Token expired. User not logged.
            try {
                $newtoken = $this->auth->refresh(); // Get new token.
                Auth::guard('api')->onceUsingId($this->auth->manager()->getPayloadFactory()->buildClaimsCollection()->toPlainArray()['sub']);
            } catch (JWTException $e) {
                // 如果捕获到此异常，即代表 refresh 也过期了，用户无法刷新令牌，需要重新登录。
                throw new UnauthorizedHttpException('jwt-auth', $e->getMessage(), $e, $e->getCode());
            }
        }

$response = $next($request);
        return $this->setAuthenticationHeader($response, $newtoken); // Response with new token on header Authorization.
    }
}
```

注册中间件App\Http\Kernel.php
```php
use App\Http\Middleware\RefreshToken;

protected $routeMiddleware = [
        ......
        'refresh.token'=>RefreshToken::class
    ];
```

# 六、routes/api.php添加路由
```
Route::prefix('auth')->group(function($router) {
    $router->post('login', 'AuthController@login');
    $router->post('logout', 'AuthController@logout');

});

Route::group(['middleware' => 'refresh.token', 'providers' => 'jwt'], function ($api) { //
    $api->get('user', 'AuthController@getUserInfo');
})
```

# 七、执行命令新增控制器
```
php artisan make:controller AuthController
```
![](https://cos.cc430.cn/2018/05/19/1526713339.png)

修改app/Http/Controllers/AuthController
```php
<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use JWTAuth;

class AuthController extends Controller
{

/**
     * Get a JWT via given credentials.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function login()
    {
        $credentials = request(['email', 'password']);
//        $token = JWTAuth::fromUser($user);
        if (!$token = JWTAuth::attempt($credentials)) {
            return response()->json(['error' => 'Unauthorized'], 401);
        }

return $this->respondWithToken($token);
    }

/**
     * Get the authenticated User.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function getUserInfo(Request $request)
    {
//        var_dump();
        var_dump($request->header('Authorization'));
        var_dump(JWTAuth::getToken());
        $user = JWTAuth::user();
        return $user;
    }

/**
     * Log the user out (Invalidate the token).
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function logout()
    {
        auth()->logout();

return response()->json(['message' => 'Successfully logged out']);
    }

/**
     * Refresh a token.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function refresh()
    {
        return $this->respondWithToken(auth()->refresh());
    }

/**
     * Get the token array structure.
     *
     * @param  string $token
     *
     * @return \Illuminate\Http\JsonResponse
     */
    protected function respondWithToken($token)
    {
        return response()->json([
            'access_token' => $token,
            'token_type' => 'bearer',
            'expires_in' => JWTAuth::factory()->getTTL() * 60,
            'user' => JWTAuth::user()#返回当前用户
        ]);
    }
}
```

# 八、上传代码到服务器

# 九、依次执行下列命令
* 下载相关依赖包
```
composer update
```
* 拷贝env文件
```
cp .env.example .env
```
* 生成项目秘钥
```
php artisan key:generate
```
* 设置 `JWT sceret`
```
php artisan jwt:secret
```
* 创建软链接
```
php artisan storage:link
```
* 生成数据表
```
php artisan migrate
```

# 十、添加数据
进入tinker
```
 php artisan tinker
```

```
>>> namespace App;
>>> User::create(['name' => 'Test','email' => 'test@qq.com','password' => bcrypt('123456')]);
```
![](https://cos.cc430.cn/2018/05/19/1526716017.png)

# 十一、使用eolinker进行测试
![](https://cos.cc430.cn/2018/05/19/1526716095.png)

* 请求时需要将登录成功后请求过来的token放在 header 中 Authorization：Bearer +token

**Bearer与token之间有个空格**

![](https://cos.cc430.cn/2018/05/19/1526722371.png)

注：报错The token has been blacklisted的前一次会在header头部Authorization参数返还新的token，前端需要进行存储
![](https://cos.cc430.cn/2018/05/21/1526872411.png)
# 十二、参考文档（致谢）
[官方文档](http://jwt-auth.readthedocs.io/en/develop/quick-start/ "参考文档")

[Laravel 5.5 使用 Jwt-Auth 实现 API 用户认证以及无痛刷新访问令](https://segmentfault.com/a/1190000012606246 "参考文档2")

laravel5.5.40使用jwt做权限认证

添加新评论

最新文章

最新回复

标签

归档

友情链接