laravel5.5中JWT多用户（多角色）认证

laravel中JWT多用户（多角色）认证
---------------------------------
场景：用户表、员工表（包括业务员和配送员）
composer.json加几个依赖包
```php
  "require": {
  		...
        "tymon/jwt-auth": "1.0.0-rc.2",
        "dingo/api": "2.0.0-alpha2",
        "liyu/dingo-serializer-switch": "^0.3.0"
    },
```

```php
php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\LaravelServiceProvider"

php artisan vendor:publish --provider="Dingo\Api\Provider\LaravelServiceProvider"
```
config 目录下生成一个 jwt.php、api.php，两个文件都不用修改
执行
> php artisan jwt:generate

.env文件JWT_SECRET会生成JWT秘钥
另外添加
```
API_STANDARDS_TREE=prs
API_SUBTYPE=yyj
API_PREFIX=api
API_VERSION=v1
API_DEBUG=true
```
到.env文件中

## 修改模型
User.php
```php
<?php
namespace App\Models;
use Tymon\JWTAuth\Contracts\JWTSubject;
use Illuminate\Notifications\Notifiable;
use Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable implements JWTSubject
{
    //
    use Notifiable;

// Rest omitted for brevity

/**
     * Get the identifier that will be stored in the subject claim of the JWT.
     *
     * @return mixed
     */
    public function getJWTIdentifier()
    {
        return $this->getKey();
    }

/**
     * Return a key value array, containing any custom claims to be added to the JWT.
     *
     * @return array
     */
    public function getJWTCustomClaims()
    {
        return [];
    }
}

```
staff.php
```php
<?php

namespace App\Models;

use Tymon\JWTAuth\Contracts\JWTSubject;
use Illuminate\Notifications\Notifiable;
use Illuminate\Foundation\Auth\User as Authenticatable;

class Staff extends Authenticatable implements JWTSubject
{
    //
    use Notifiable;

// Rest omitted for brevity

/**
     * Return a key value array, containing any custom claims to be added to the JWT.
     *
     * @return array
     */
    public function getJWTCustomClaims()
    {
        return [];
    }
}

```

## 表结构及数据生成
### 表结构
users表
```php
<?php

use Illuminate\Support\Facades\Schema;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Database\Migrations\Migration;

class CreateUsersTable extends Migration
{
    /**
     * Run the migrations.
     *
     * @return void
     */
    public function up()
    {
        Schema::create('users', function (Blueprint $table) {
            $table->increments('id');
            $table->string('name');
            $table->string('email')->unique();
            $table->string('password');
            $table->rememberToken();
            $table->timestamps();
        });
    }

/**
     * Reverse the migrations.
     *
     * @return void
     */
    public function down()
    {
        Schema::dropIfExists('users');
    }
}

```
staff员工表
```php
<?php

use Illuminate\Support\Facades\Schema;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Database\Migrations\Migration;

class CreateStaffTable extends Migration
{
    /**
     * Run the migrations.
     *
     * @return void
     */
    public function up()
    {
        Schema::create('staff', function (Blueprint $table) {
            $table->increments('id');
            $table->string('name');
            $table->string('email')->unique();
            $table->string('password');
            $table->string('role');
            $table->rememberToken();
            $table->timestamps();
        });
    }

/**
     * Reverse the migrations.
     *
     * @return void
     */
    public function down()
    {
        Schema::dropIfExists('staff');
    }
}

```

### 数据生成
StaffFactory.php
```php
<?php

use Faker\Generator as Faker;

/*
|--------------------------------------------------------------------------
| Model Factories
|--------------------------------------------------------------------------
|
| This directory should contain each of the model factory definitions for
| your application. Factories provide a convenient way to generate new
| model instances for testing / seeding your application's database.
|
*/

$factory->define(App\Models\Staff::class, function (Faker $faker) {
    return [
        'name' => $faker->name,
        'email' => $faker->unique()->safeEmail,
        'role' => $faker->randomElement(['deliveryman','salesman']),
        'password' => bcrypt('888888'), // secret
        'remember_token' => str_random(10),
    ];
});

```
UserFactory.php
```php
<?php

use Faker\Generator as Faker;

$factory->define(App\Models\User::class, function (Faker $faker) {
    return [
        'name' => $faker->name,
        'email' => $faker->unique()->safeEmail,
        'password' => bcrypt('888888'), // secret
        'remember_token' => str_random(10),
    ];
});

```
### seeder
StaffSeeder.php
```php
<?php

use Illuminate\Database\Seeder;

class StaffSeeder extends Seeder
{
    /**
     * Run the database seeds.
     *
     * @return void
     */
    public function run()
    {
        $roles = [
            [
                'name' => 'salesman',
                'email' => '0001@qq.com',
                'role' => 'salesman',
                'password' => bcrypt('888888'), // secret
                'remember_token' => str_random(10),
            ], [
                'name' => 'deliveryman',
                'email' => '0002@qq.com',
                'role' => 'deliveryman',
                'password' => bcrypt('888888'), // secret
                'remember_token' => str_random(10),
            ]
        ];

foreach ($roles as $role) {
            \App\Models\Staff::firstOrCreate($role);
        }
    }
}

```

UserSeeder.php
```php
<?php

use Illuminate\Database\Seeder;

class UserSeeder extends Seeder
{
    /**
     * Run the database seeds.
     *
     * @return void
     */
    public function run()
    {
        //
        $roles = [
            [
                'name' => 'user',
                'email' => '0003@qq.com',
                'password' => bcrypt('888888'), // secret
                'remember_token' => str_random(10),
            ]
        ];

foreach ($roles as $role) {
            \App\Models\User::firstOrCreate($role);
        }
    }
}

```
注册seeder
```php
<?php

use Illuminate\Database\Seeder;

class DatabaseSeeder extends Seeder
{
    /**
     * Run the database seeds.
     *
     * @return void
     */
    public function run()
    {
        $this->call(UserSeeder::class);
        $this->call(StaffSeeder::class);
    }
}

```

## 改配置
config/auth.php
```php
<?php

return [

/*
    |--------------------------------------------------------------------------
    | Authentication Defaults
    |--------------------------------------------------------------------------
    |
    | This option controls the default authentication "guard" and password
    | reset options for your application. You may change these defaults
    | as required, but they're a perfect start for most applications.
    |
    */

'defaults' => [
        'guard' => 'web',
        'passwords' => 'users',
    ],

/*
    |--------------------------------------------------------------------------
    | Authentication Guards
    |--------------------------------------------------------------------------
    |
    | Next, you may define every authentication guard for your application.
    | Of course, a great default configuration has been defined for you
    | here which uses session storage and the Eloquent user provider.
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | Supported: "session", "token"
    |
    */

'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

'api' => [
            'driver' => 'jwt',
            'provider' => 'users',
        ],

'staff'=>[
            'driver' => 'jwt',
            'provider' => 'staff',
        ]
    ],

/*
    |--------------------------------------------------------------------------
    | User Providers
    |--------------------------------------------------------------------------
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | If you have multiple user tables or models you may configure multiple
    | sources which represent each model / table. These sources may then
    | be assigned to any extra authentication guards you have defined.
    |
    | Supported: "database", "eloquent"
    |
    */

'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\Models\User::class,
        ],

'staff' => [
            'driver' => 'eloquent',
            'model' => App\Models\Staff::class,
        ],

// 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

/*
    |--------------------------------------------------------------------------
    | Resetting Passwords
    |--------------------------------------------------------------------------
    |
    | You may specify multiple password reset configurations if you have more
    | than one user table or model in the application and you want to have
    | separate password reset settings based on the specific user types.
    |
    | The expire time is the number of minutes that the reset token should be
    | considered valid. This security feature keeps tokens short-lived so
    | they have less time to be guessed. You may change this as needed.
    |
    */

'passwords' => [
        'users' => [
            'provider' => 'users',
            'table' => 'password_resets',
            'expire' => 60,
        ],
    ],

];

```
## 新建中间件验证角色
CheckRole.php
```php
<?php

namespace App\Http\Middleware;

use Closure;

class CheckRole
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next,$role)
    {
        if($request->user('staff')->role !== $role){
            return app(\Dingo\Api\Http\Response\Factory::class)->errorForbidden('访问受限');
        }
        return $next($request);
    }
}

```

注册中间件
Kernel.php
```php
	protected $routeMiddleware = [
      .....
        'role' => \App\Http\Middleware\CheckRole::class,
    ];

```

## 控制器
app\Http\Controllers\Controller.php
```php
<?php

namespace App\Http\Controllers;

use Illuminate\Foundation\Bus\DispatchesJobs;
use Illuminate\Routing\Controller as BaseController;
use Illuminate\Foundation\Validation\ValidatesRequests;
use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
#这里
use Dingo\Api\Routing\Helpers;

class Controller extends BaseController
{
	#多use了一个Helpers
    use AuthorizesRequests, DispatchesJobs, ValidatesRequests,Helpers;
}
```
登录控制器App\Http\Controllers\Api\Auth\AuthController.php
```php
<?php

namespace App\Http\Controllers\Api\Auth;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Validator;

class AuthController extends Controller
{
    /**
     * @param Request $request
     * 登录
     * @return string
     */
    public function login(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'username' => 'required',
            'password' => 'required',
        ], [
            'username.required' => '手机号/卡号不能为空',
            'password.required' => '密码不能为空',
        ]);

if ($validator->fails()) {
            return response($validator->errors()->first(), 201);
        }
        $phonelogin = ['name' => $request->username, 'password' => $request->password];
        if (!$token = Auth::guard('api')->attempt($phonelogin)) {
            //登录失败
            return response('失败', 201);
        }
        return $this->respondWithToken($token)->setStatusCode(201);
//        return response($token, 200);
    }

/**
     * @param Request $request
     * 登录
     * @return string
     */
    public function StaffLogin(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'username' => 'required',
            'password' => 'required',
        ], [
            'username.required' => '手机号/卡号不能为空',
            'password.required' => '密码不能为空',
        ]);

if ($validator->fails()) {
            return response($validator->errors()->first(), 201);
        }
        $phonelogin = ['name' => $request->username, 'password' => $request->password];
        if (!$token = Auth::guard('staff')->attempt($phonelogin)) {
            //登录失败
            return response('失败', 201);
        }
        return $this->respondWithToken($token)->setStatusCode(201);
//        return response($token, 200);
    }

private function respondWithToken($token, $extend = [])
    {
        return $this->response->array(array_merge([
            'access_token' => $token,
            'token_type' => 'Bearer',
            'expires_in' => auth()->guard('api')->factory()->getTTL() * 60,
        ], $extend));
    }

}
```

员工访问的控制器
App\Http\Controllers\Api\StaffController.php
```php
<?php

namespace App\Http\Controllers\Api;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use Illuminate\Support\Facades\Auth;

class StaffController extends Controller
{
    /**
     * Get the authenticated User.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function deliverymanInfo(Request $request)
    {
        $user = Auth::guard('staff')->user();
        return response($user, 200);
    }

public function salesmanInfo()
    {
        $user = Auth::guard('staff')->user();
        return response($user, 200);
    }
}
```
会员访问的控制器
```php
<?php

namespace App\Http\Controllers\Api;

use App\Models\User;
use App\Models\Staff;
use Carbon\Carbon;
use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Validator;

class UserController extends Controller
{
    public function userInfo(Request $request)
    {
//        return "asds";
        $user = Auth::guard('api')->user();
        return response($user);
    }
}
```

## 路由
api.php
```php
<?php

use Illuminate\Http\Request;

/*
|--------------------------------------------------------------------------
| API Routes
|--------------------------------------------------------------------------
|
| Here is where you can register API routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| is assigned the "api" middleware group. Enjoy building your API!
|
*/
$api = app(Dingo\Api\Routing\Router::class);
$api->version('v1', [
    'namespace' => 'App\Http\Controllers\Api',
    'middleware' => ['serializer:array', 'bindings'],
], function ($api) {
    $api->group(['prefix' => 'auth','namespace'=>'Auth'], function ($api) {
        //用户登录
        $api->post('login', 'AuthController@login');
        //员工登录
        $api->post('StaffLogin', 'AuthController@StaffLogin');
    });

//用户登录后访问
    $api->group(['middleware' => 'auth:api'], function ($api) {
        $api->post('userInfo', 'UserController@userInfo');
    });

//员工登录后访问
    $api->group(['middleware' => 'auth:staff'], function ($api) {
        // 配送员访问接口
        $api->group(['middleware' => 'role:deliveryman'], function ($api) {
            $api->post('deliverymanInfo', 'StaffController@deliverymanInfo');
        });
        // 业务员访问接口
        $api->group(['middleware' => 'role:salesman'], function ($api) {
            $api->post('salesmanInfo', 'StaffController@salesmanInfo');
        });
    });
});
```
截图：
用户登录：
![](https://cos.cc430.cn/2018/07/18/1531901463.png)
员工（业务员）登录：
![](https://cos.cc430.cn/2018/07/18/1531901547.png)

员工（配送员）登录：
![](https://cos.cc430.cn/2018/07/18/1531901617.png)

用配送员token访问业务员才能访问的接口
![](https://cos.cc430.cn/2018/07/18/1531901715.png)

用配送员token访问配送员接口
![](https://cos.cc430.cn/2018/07/18/1531901773.png)

eolinker api下载地址：https://cos.cc430.cn/2018/07/18/eolinker_export_project_1531900920.export

已有 6 条评论

marry

2018-08-24 10:54:11

为什么我通过获取的token获取不到用户信息，默认的users表可以，自定义的admins表不行，获取的是空

回复
1. 菜菜子
  
  2018-08-24 10:58:41
  
  有参考登录控制器StaffLogin方法吗？
  
  回复
  1. marry
    
    2018-08-24 11:33:12
    
    参考了，我也成功获取了token，但是当我在其他的接口通过token获取信息时，获取不到为空，我使用的是自定义的admins表
    
    回复
    
    菜菜子
    
    2018-08-24 11:35:21
    
    如果可以的话可以把你的项目放git上私发地址给我，我有空会帮你看看
    
    回复
    
    marry
    
    2018-08-24 11:43:09
    
    好的
    
    菜菜子
    
    2018-08-25 12:42:32
    
    老哥你看下你Admin模型，，，，，
    class Admin extends Authenticatable implements JWTSubject
    你写成了
    class admin extends Authenticatable implements JWTSubject
    Admin大小写错了.....

laravel5.5中JWT多用户（多角色）认证

添加新评论

最新文章

最新回复

标签

归档

友情链接