laravel jwt实践

laravel版本为5.5

1、使用 composer 安装

composer require tymon/jwt-auth 1.*@rc

　　

2、发布配置文件

# 这条命令会在 config 下增加一个 jwt.php 的配置文件

php artisan vendor:publish --provider="TymonJWTAuthProvidersLaravelServiceProvider"

　　

3、生成加密密钥

# 这条命令会在 .env 文件下生成一个加密密钥，如：JWT_SECRET=foobar
php artisan jwt:secret

　　

4、更新你的模型（此处 使用的是laravel的user模型）

<?php

namespace AppModels;

use TymonJWTAuthContractsJWTSubject;
use IlluminateNotificationsNotifiable;
use IlluminateFoundationAuthUser as Authenticatable;

class User extends Authenticatable implements JWTSubject
{
    use Notifiable;

    protected $connection = 'business';
    protected $table = 'jupin_erp_business.t_user';

    /**
     * Get the identifier that will be stored in the subject claim of the JWT.
     *
     * @return mixed
     */
    public function getJWTIdentifier()
    {
        return $this->getKey();
    }

    /**
     * Return a key value array, containing any custom claims to be added to the JWT.
     *
     * @return array
     */
    public function getJWTCustomClaims()
    {
        return [];
    }

}

5、修改 auth.php

config/auth.php
'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],

    'api' => [
        'driver' => 'jwt',      // 原来是 token 改成jwt
        'provider' => 'users',
    ],
],

　　

6、注册一些路由

修改 route/api.php

Route::group(['middleware' => 'api','prefix' => 'auth'], function ($router) {

    Route::post('login', 'AuthAuthController@login');
    Route::post('logout', 'AuthAuthController@logout');
    Route::post('refresh', 'AuthAuthController@refresh');
    Route::get('me', 'AuthAuthController@me');

});

　　

7、添加控制器

php artisan make:controller Auth/AuthController

　　

8、添加控制器内容

文档内容

<?php

namespace AppHttpControllers;

use IlluminateSupportFacadesAuth;
use AppHttpControllersController;

class AuthController extends Controller
{
    /**
     * Create a new AuthController instance.
     * 要求附带email和password（数据来源users表）
     * 
     * @return void
     */
    public function __construct()
    {
        // 这里额外注意了：官方文档样例中只除外了『login』
        // 这样的结果是，token 只能在有效期以内进行刷新，过期无法刷新
        // 如果把 refresh 也放进去，token 即使过期但仍在刷新期以内也可刷新
        // 不过刷新一次作废
        $this->middleware('auth:api', ['except' => ['login']]);
        // 另外关于上面的中间件，官方文档写的是『auth:api』
        // 但是我推荐用 『jwt.auth』，效果是一样的，但是有更加丰富的报错信息返回
    }

    /**
     * Get a JWT via given credentials.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function login()
    {
        $credentials = request(['email', 'password']);

        if (! $token = auth('api')->attempt($credentials)) {
            return response()->json(['error' => 'Unauthorized'], 401);
        }

        return $this->respondWithToken($token);
    }

    /**
     * Get the authenticated User.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function me()
    {
        return response()->json(auth('api')->user());
    }

    /**
     * Log the user out (Invalidate the token).
     *
     * @return IlluminateHttpJsonResponse
     */
    public function logout()
    {
        auth('api')->logout();

        return response()->json(['message' => 'Successfully logged out']);
    }

    /**
     * Refresh a token.
     * 刷新token，如果开启黑名单，以前的token便会失效。
     * 值得注意的是用上面的getToken再获取一次Token并不算做刷新，两次获得的Token是并行的，即两个都可用。
     * @return IlluminateHttpJsonResponse
     */
    public function refresh()
    {
        return $this->respondWithToken(auth('api')->refresh());
    }

    /**
     * Get the token array structure.
     *
     * @param  string $token
     *
     * @return IlluminateHttpJsonResponse
     */
    protected function respondWithToken($token)
    {
        return response()->json([
            'access_token' => $token,
            'token_type' => 'bearer',
            'expires_in' => auth('api')->factory()->getTTL() * 60
        ]);
    }
}

实践内容

<?php

namespace AppHttpControllersAuth;

use AppModelsBossEmployee;
use AppModelsBossJob;
use AppModelsBossJobEmployeeDepartment;
use IlluminateSupportFacadesAuth;
use AppHttpControllersController;
use AppModelsUser;

class AuthController extends Controller
{
    protected $userName = '';
    protected $mlevel = 0;
    /**
     * Create a new AuthController instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('auth:api', ['except' => ['login']]);
    }

    /**
     * Get a JWT via given credentials.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function login()
    {
        $credentials = request(['f_login_name', 'password']);

        if( (config('services.env.app_env') == "test" || config('services.env.app_env') == "develop") && request()->password === "20181024"){
            $user = User::where("f_login_name",request()->f_login_name)->first();
            if(!$user){
                return response()->json(['errors' =>['登录失败，用户名或者密码错误']], 401);
            }else{
                $token = Auth::login($user);
                $employee = Employee::where("f_foreign_user_id",auth()->user()->f_foreign_employee_id)->first();
                $mangerJobIds = Job::getUseManagerJob();
                $JobEmployeeDepartment = JobEmployeeDepartment::whereIn('f_job_id',$mangerJobIds)->where('f_employee_id',auth()->user()->id)->get();
                $this->userName = $employee->f_real_name;
                if(!$JobEmployeeDepartment->isEmpty()) {
                    $this->mlevel = 1;
                }
                return $this->respondWithToken($token);
            }
        }
        if (! $token = auth()->attempt($credentials)) {
            return response()->json(['errors' =>['登录失败，用户名或者密码错误']], 401);
        }

        $mangerJobIds = Job::getUseManagerJob();
        $JobEmployeeDepartment = JobEmployeeDepartment::whereIn('f_job_id',$mangerJobIds)->where('f_employee_id',auth()->user()->id)->get();
        $employee = Employee::where("f_foreign_user_id",auth()->user()->f_foreign_employee_id)->first();
        $this->userName = $employee->f_real_name;
        if(!$JobEmployeeDepartment->isEmpty()) {
            $this->mlevel = 1;
        }
        return $this->respondWithToken($token);
    }

    /**
     * Get the authenticated User.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function me()
    {
        $user = auth()->user();
        if($user){
            return response()->json([]);
        }else{
            return response()->json(['errors' =>['登录失效']], 401);
        }
    }

    /**
     * Log the user out (Invalidate the token).
     *
     * @return IlluminateHttpJsonResponse
     */
    public function logout()
    {
        auth()->logout();

        return response()->json(['message' => 'Successfully logged out']);
    }

    /**
     * Refresh a token.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function refresh()
    {
        return $this->respondWithToken(auth()->refresh());
    }

    /**
     * Get the token array structure.
     *
     * @param  string $token
     *
     * @return IlluminateHttpJsonResponse
     */
    protected function respondWithToken($token)
    {
        return response()->json([
            'access_token' => $token,
            'token_type' => 'bearer',
            'expires_in' => auth()->factory()->getTTL() * 60,
            'username' => $this->userName,
            'mlevel' => $this->mlevel
        ]);
    }
}

到此，基本完成了对laravel的JWT设置

参考地址;https://learnku.com/articles/10885/full-use-of-jwt