Laravel開發(fā)：如何使用Laravel Sanctum為SPA提供API身份驗(yàn)證？

composer require laravel/sanctum

'providers' => [     // ...     LaravelSanctumSanctumServiceProvider::class,  ],

php artisan vendor:publish --provider="LaravelSanctumSanctumServiceProvider"

php artisan migrate

<?php namespace AppModels;  use IlluminateFoundationAuthUser as Authenticatable; use IlluminateNotificationsNotifiable; use LaravelSanctumHasApiTokens;  class User extends Authenticatable {     use Notifiable, HasApiTokens;      // ... }

... use IlluminateSupportFacadesSchema; use IlluminateSupportFacadesURL;  class AppServiceProvider extends ServiceProvider {     public function boot()     {         Schema::defaultStringLength(191);          if (config('app.env') === 'production') {             URL::forceScheme('https');         }          $headers = [             'Access-Control-Allow-Origin' => '*',             'Access-Control-Allow-Methods' => 'POST, GET, OPTIONS, PUT, DELETE',             'Access-Control-Allow-Headers' => 'Origin, Content-Type, Accept, Authorization, X-Request-With',             'Access-Control-Allow-Credentials' => 'true',         ];         $this->app['router']->middleware('api')->get('/sanctum/csrf-cookie', function () {             return response()->json(['status' => 'success']);         });          foreach ($headers as $key => $value) {             config(['cors.supportsCredentials' => true]);             config(['cors.paths.api/*' => [                 'allowedOrigins' => ['http://spa.test'],                 'allowedHeaders' => [$key],                 'allowedMethods' => ['*'],                 'exposedHeaders' => [],                 'maxAge' => 86400,             ]]);         }     } }

public function index(Request $request) {     $user = $request->user();     // ... }  public function store(Request $request) {     $user = $request->user();     // ... }  public function destroy(Request $request, string $id) {     $user = $request->user();       // ... }  public function update(Request $request, string $id) {     $user = $request->user();     // ... }

axios.get('http://api.spa.test/sanctum/csrf-cookie').then(response => {     axios.post('http://api.spa.test/login', {         username: this.username,         password: this.password     }).then(response => {         axios.defaults.headers.common['Authorization'] = `Bearer ${response.data.token}`;         this.$router.push({ name: 'home' });     }); });

axios.post('http://api.spa.test/logout').then(response => {     delete axios.defaults.headers.common['Authorization'];     this.$router.push({ name: 'login' }); });