分析laravel8中的dingo與jwt鑒權(quán)

composer require dingo/api

php artisan vendor:publish --provider="DingoApiProviderLaravelServiceProvider"

# dingo # API_SUBTYPE —— 項目的簡稱； API_SUBTYPE=lms # API_PREFIX —— 與 API_DOMAIN 二選一，路由的前綴，例如設(shè)置為 api API_PREFIX=api # 定義版本 API_VERSION=v1 # 是否開啟調(diào)試模式 API_DEBUG=true

composer require tymon/jwt-auth

php artisan vendor:publish --provider="TymonJWTAuthProvidersLaravelServiceProvider"

php artisan jwt:secret

'auth' => [     'jwt' => 'DingoApiAuthProviderJWT', ],

'defaults' => [         #注：這里修改改了默認(rèn)的配置，默認(rèn)是web         'guard' => 'api',         'passwords' => 'users',     ],     'guards' => [         'web' => [             'driver' => 'session',             'provider' => 'users',         ],          'api' => [             'driver' => 'jwt',             'provider' => 'users',             'hash' => false,         ],     ],

namespace AppHttpMiddleware;  use Closure; use IlluminateSupportFacadesAuth; use IlluminateHttpRequest; use SymfonyComponentHttpKernelExceptionUnauthorizedHttpException; use TymonJWTAuthExceptionsJWTException; use TymonJWTAuthExceptionsTokenExpiredException; use TymonJWTAuthHttpMiddlewareBaseMiddleware;  class RefreshToken extends BaseMiddleware {     /**      * Handle an incoming request.      *      * @param  IlluminateHttpRequest  $request      * @param  Closure  $next      * @return mixed      */     public function handle(Request $request, Closure $next)     {         // 檢查此次請求中是否帶有 token，如果沒有則拋出異常。         $this->checkForToken($request);          // 使用 try 包裹，以捕捉 token 過期所拋出的 TokenExpiredException  異常         try {             // 檢測用戶的登錄狀態(tài)，如果正常則通過             if ($this->auth->parseToken()->authenticate()) {                 return $next($request);             }             throw new UnauthorizedHttpException('jwt-auth', '未登錄');         } catch (TokenExpiredException $exception) {             // 此處捕獲到了 token 過期所拋出的 TokenExpiredException 異常，我們在這里需要做的是刷新該用戶的 token 并將它添加到響應(yīng)頭中             try {                 // 刷新用戶的 token                 $token = $this->auth->refresh();                 // 使用一次性登錄以保證此次請求的成功                 Auth::guard('api')                     ->onceUsingId($this->auth->manager()                         ->getPayloadFactory()                         ->buildClaimsCollection()                         ->toPlainArray()['sub']);             } catch (JWTException $exception) {                 // 如果捕獲到此異常，即代表 refresh 也過期了，用戶無法刷新令牌，需要重新登錄。                 throw new UnauthorizedHttpException('jwt-auth', $exception->getMessage());             }         }          // 在響應(yīng)頭中返回新的 token         return $this->setAuthenticationHeader($next($request), $token);     } }

<?php  namespace AppModels;  use IlluminateContractsAuthMustVerifyEmail; use IlluminateFoundationAuthUser as Authenticatable; use IlluminateNotificationsNotifiable; use TymonJWTAuthContractsJWTSubject;  class User extends Authenticatable implements JWTSubject {     use Notifiable;      public $table = "user";      /**      * The attributes that are mass assignable.      *      * @var array      */     protected $fillable = [         'name', 'email', 'password','phone','status','create_time','addr_id'     ];      /**      * The attributes that should be hidden for arrays.      *      * @var array      */     protected $hidden = [         'password', 'remember_token',     ];      /**      * The attributes that should be cast to native types.      *      * @var array      */     protected $casts = [ //        'email_verified_at' => 'datetime',     ];      /**      * 指示是否自動維護(hù)時間戳      *      * @var bool      */     public $timestamps = false;      public function getJWTIdentifier()     {         return $this->getKey();     }     public function getJWTCustomClaims()     {         return [];     } } ?>

<?php  namespace AppHttpControllersApiV1;  use AppHttpControllersController; use AppModelsUser; use DingoApiRoutingHelpers; use IlluminateHttpRequest;  class UserController extends Controller {     use Helpers;      public function __construct()     {        //除去token驗證的方法        $this->middleware('refresh.token', [             'except' => [                 'login',             ],         ]);     }       /**用戶登錄      * @param Request $request      * @return IlluminateHttpJsonResponse|void      */     public function login(Request $request)     {         $phone = $request->get('phone');          $user = User::where('phone', $phone)->first();  //        //attempt貌似無法驗證其他字段,如需用其他字段鑒權(quán)使用login() //        $credentials = request(['name','password']); //        if (!$token = auth()->attempt($credentials)) { //            return response()->json(['error' => 'Unauthorized'], 401); //        }          //只要是user實例就可以通過login鑒權(quán)         if (! $token = auth()->login($user)) {             return response()->json([                 "restful" => false,                 "message" => "賬號錯誤",             ]);         }          //獲取用戶信息         $user = $this->user();         $key = "user::info::".$user->id;         //Redis緩存用戶信息3600秒         Redis::set($key,serialize($user->original),"EX",3600);          return $this->respondWithToken($token);     }      /**獲取用戶      * Get the authenticated User.      *      * @return IlluminateHttpJsonResponse      */     public function user()     {         return response()->json(auth()->user());     }      /**用戶退出      * Log the user out (Invalidate the token).      *      * @return IlluminateHttpJsonResponse      */     public function logout()     {         auth()->logout();          return response()->json(["message" => "退出成功"]);     }      /**用戶登錄狀態(tài)刷新      * Refresh a token.      * @return IlluminateHttpJsonResponse      */     public function refresh()     {         return $this->respondWithToken(auth()->refresh());     }      /**返回值      * @param $token      * @return array      */     protected function respondWithToken($token)     {         return [             'access_token' => $token,             'token_type' => 'Bearer',             'expires_in' => auth()->factory()->getTTL() * 60,             'restful' => true         ];     } }