Composer无法安装tymon / jwt-auth_course

<div class="post-text" itemprop="text"> <p>Please assist, composer could not install tymon/jwt-auth:0.5.* </p> <p>I had type :</p> <pre><code>composer require tymon/jwt-auth:0.5.* </code></pre> <p>i also tried to add the ff in projects composer.json: </p> <pre><code> require { .... "tymon/jwt-auth": "dev-master", .... } </code></pre> <p>and "tymon/jwt-auth": "0.5.*" respectively</p> <p>Plase note : I am new to laravel ...</p> </div>

无法在Laravel 5.2.39中安装tymon / jwt-auth_course

<div class="post-text" itemprop="text"> <p>I try to install tymon/jwt-aut in fresh Laravel 5.2.39</p> <pre><code>composer require tymon/jwt-aut </code></pre> <p>I'm get response:</p> <pre><code>[InvalidArgumentException] Could not find package tymon/jwt-aut at any version for your minimum-stability (stable). Check the package spelling or your minimum-stability </code></pre> </div>

如何使用jwt-auth在Laravel中正确设置JWT秘密？_course

<div class="post-text" itemprop="text"> <p>I'd like to test the authentication of JWTs in my project as the JWTs will be sent from outside the app, and so they must be signed using the key from my application. Is this possible? Does anyone know of a site that allows you to sign a token using a secret? </p> <p>I tried <a href="http://jwtbuilder.jamiekurtz.com/" rel="nofollow noreferrer">http://jwtbuilder.jamiekurtz.com/</a> but JWT-auth keeps returning <code>{"error":"token_invalid"}</code> if I enter the key which was returned by <code>jwt:generate</code>. This leads me to believe the key returned by this command is not actually the key used to sign JWTs in my application.</p> <p>I'm using <code>php artisan jwt:generate</code> to generate a key, which returns the following: </p> <pre><code>jwt-auth secret [...] set successfully. </code></pre> <p>But where is it set? The <code>JWT_SECRET</code> variable in my .ENV file doesn't change, and if I perform a project wide search for the key it's not found. </p> <p>Does this command work?</p> <p>Laravel 5.3, jwt-auth 0.5.9.</p> </div>

Laravel中的JWT tymon / jwt-auth刷新令牌_course

<div class="post-text" itemprop="text"> <p>I am using tymon/jwt-auth library in Laravel to generate token. At the moment I am able to create the token:</p> <pre><code>$token = JWTAuth::attempt($credentials) </code></pre> <p>The point is I need to generate also a refresh token to return to the user, how can I do it? The final results should be like this:</p> <pre><code>{ "jwt":"eyJ0eXAiOiJKV1QiLCJhbGciOi . . .", "refresh_token": "b5ed616d32 . . ." } </code></pre> </div>

我应该手动在DB中创建并保存tymon / jwt-auth刷新令牌吗？_course

<div class="post-text" itemprop="text"> <p>I am using laravel's tymon/jwt-auth access token for authentication, now I want to use Refresh token for better experience. I know that refresh token should be stored in database? so I have to create and save refresh token in database manually and apply my own logic? or maybe there is better, easier and ready approach? </p> </div>

找不到“Tymon \ JWTAuth \ Providers \ LaravelServiceProvider”类_course

<div class="post-text" itemprop="text"> <p>I'm using Laravel package <a href="http://jwt-auth.readthedocs.io/en/develop/laravel-installation/" rel="nofollow noreferrer">Tymon JWT</a> and it was working fine so far. But I tried to install Laravel intervention package and ran Composer update command after which it stopped working and started giving errors as I mentioned.</p> <p>I've tried all the answers like removing it and reinstalling it back, composer update, install, but still same error and whole project is stopped now.</p> <p>I've added this in provider's array:</p> <pre><code>Tymon\JWTAuth\Providers\LaravelServiceProvider::class, </code></pre> <p>Composer:</p> <pre><code>"require": { "php": "&gt;=5.6.4", "barryvdh/laravel-cors": "^0.11.0", "irazasyed/jwt-auth-guard": "^1.0", "jadjoubran/laravel-angular": "^0.4.0", "laravel/framework": "5.4.*", "laravel/tinker": "~1.0", "tymon/jwt-auth": "^0.5.12" }, </code></pre> <p>What could be the issue?</p> </div>

在使用JWT进行身份验证时，我们如何更改字段名称_course

<div class="post-text" itemprop="text"> <pre><code>public function authenticate() { $id = $this-&gt;getPayload()-&gt;get('sub'); if (! $this-&gt;auth-&gt;byId($id)) { return false; } return $this-&gt;user(); } protected function authenticated(Request $request, $user) { $credentials = $request-&gt;only('email', 'password'); try { if (! $token = JWTAuth::attempt($credentials)) { echo "Invalid request!"; } } catch (JWTException $e) { echo "Could not create a token!"; } \Cookie::queue('token', $token, 3600); } </code></pre> <p>When printing <code>$id</code> it return to the id of user's table let say i don't have id I used <code>user_id</code> how can i change this and where please guide. Thanks</p> </div>

Laravel 5.4 Tymon JWT Auth Guard驱动程序未定义_course

<div class="post-text" itemprop="text"> <p>I've implemented Tymon JWT for Laravel 5.4 &amp; its working fine with users (default) model.</p> <p>However, I want it to work for api guard not default web.</p> <p>If I set default guard to api &amp; set api driver to token as:</p> <pre><code>'api' =&gt; [ 'driver' =&gt; 'token', 'provider' =&gt; 'app_users', ], </code></pre> <p>I get following error</p> <pre><code>Call to undefined method Illuminate\Auth\TokenGuard::attempt() </code></pre> <p>If I set api driver to jwt-auth, I get follwing error</p> <pre><code>Auth guard driver [api] is not defined. </code></pre> <p>Interestingly it works fine If I change driver to session.</p> <pre><code>'api' =&gt; [ 'driver' =&gt; 'session', 'provider' =&gt; 'api_users', ], </code></pre> <p>Just wanted to know what driver should I set for JWT api tokens, as session driver is for web only?</p> </div>

Laravel jwt身份验证令牌已过期，token_invalid_course

<div class="post-text" itemprop="text"> <p>我对jwt auth令牌到期有个问题。 情况是这样的：我把laravel中的API作为一个项目来编写。 这个API使用另一个laravel项目(客户端)。 但是当我尝试用户登录,一切都很好,但之后我开始意识到TTL(60分钟)(时间生活)通过,然后当我试图让用户资源(需要登录用户)我得到json错误响应{“错误”= >“token_expired”}。 这是我使用jwt的代码的路由部分。 auth中间件：</p> <pre><code>Route::group(['middleware' =&gt; 'jwt.auth'], function () { Route::get('account/getUserDetails', 'Api\AccountController@getUserDetails'); }); </code></pre> <p>我很困惑为什么令牌不会自动刷新，我是否需要在某个地方明确指定刷新令牌的方式，难道不是这样的吗？</p> <p>“refresh_ttl”=比;20160，在jwt.php中。端点看起来是这样的：</p> <pre><code>public function getUserDetails(Request $request) { try { if (! $user = JWTAuth::parseToken()-&gt;authenticate()) { return response()-&gt;json(['user_not_found'], 404); } } catch (Tymon\JWTAuth\Exceptions\TokenExpiredException $e) { $refreshed = JWTAuth::refresh(JWTAuth::getToken()); $user = JWTAuth::setToken($refreshed)-&gt;toUser(); return $this-&gt;response-&gt;withArray(['token' =&gt; $refreshed]); } catch (Tymon\JWTAuth\Exceptions\TokenInvalidException $e) { return response()-&gt;json(['token_invalid'], $e-&gt;getStatusCode()); } catch (Tymon\JWTAuth\Exceptions\JWTException $e) { return response()-&gt;json(['token_absent'], $e-&gt;getStatusCode()); } return $user; } </code></pre> </div>

Laravel JWT Auth无法正常工作，$ token为false / true_course

<div class="post-text" itemprop="text"> <p>I'm using Laravel 5.7 and "tymon/jwt-auth": "1.0.0-rc.3" for authentication. After I registered an user, when i try to autenthicate him i always get a bool value: true or false, not the token. I tried all the "fixes" I found on the internet and nothing works. What am I missing?</p> <p>This is the register method:</p> <pre><code>protected function create(array $data) { if ($data['legitimation_id'][0] === 'E') { $user_type = 1; } else if ($data['legitimation_id'][0] === 'P') { $user_type = 2; } $data['user_type'] = $user_type; $data['password'] = Hash::make($data['password']); $user = User::create($data); LegitimationController::delete($data['legitimation_id']); return $user; } public function register(Request $request) { $data = $request-&gt;all(); if ($this-&gt;validator($data)-&gt;fails()) { return $this-&gt;sendError('Validation Error.', $this-&gt;validator($data)-&gt;errors()); } if (mb_substr($data['legitimation_id'], 0, 1) != 'P' &amp;&amp; mb_substr($data['legitimation_id'], 0, 1) != 'E' ) { return $this-&gt;sendError('Validation Error.', array("legitimation_id" =&gt; 'Fail')); }; $user = $this-&gt;create($data); $success = ['first_name' =&gt; $user['first_name'], 'last_name' =&gt; $user['last_name']]; return $this-&gt;sendResponse($success, 'Succes'); } </code></pre> <p>This is the login method:</p> <pre><code>public function login(Request $request) { $credentials = $request-&gt;only('email', 'password'); $jwt_token = null; if (!$jwt_token = auth('api')-&gt;attempt($credentials)) { $this-&gt;sendError("Unauthorized", ['error' =&gt; 'Invalid Email or Password'], 401); } $this-&gt;sendResponse(['token' =&gt; $jwt_token], "Succes"); } </code></pre> <p>api.php</p> <pre><code>Route::group([ 'middleware' =&gt; 'cors', 'prefix' =&gt; 'v1' ], function () { Route::post('register', 'Auth\RegisterController@register'); Route::post('login', 'Auth\LoginController@login'); }); </code></pre> <p>auth.php</p> <pre><code>'guards' =&gt; [ 'web' =&gt; [ 'driver' =&gt; 'session', 'provider' =&gt; 'users', ], 'api' =&gt; [ 'driver' =&gt; 'jwt', 'provider' =&gt; 'users', ], ], </code></pre> </div>

JWT验证错误：无法从请求中解析令牌_course

<div class="post-text" itemprop="text"> <p>Currently I'm developing Laravel 5.8 with using JWT Auth, everything running as well in Postman, but when I tried for testing on Browser, I got a lot of errors and one by one has been fixed. Now I'm get another error when I try to pass JSON Web Token by using Request. The token isn't provided correctly. After I do sign in process in :</p> <pre><code>public function signin(Request $request) { $this-&gt;validate($request, [ 'username' =&gt; 'required', 'password' =&gt; 'required' ]); // grab credentials from the request $credentials = $request-&gt;only('username', 'password'); try { // attempt to verify the credentials and create a token for the user if (! $token = JWTAuth::attempt($credentials)) { return response()-&gt;json([ 'error' =&gt; 'Invalid Credentials, username and password dismatches. Or username may not registered.', 'status' =&gt; '401' ], 401); } } catch (JWTException $e) { // something went wrong whilst attempting to encode the token return response()-&gt;json(['error' =&gt; 'could_not_create_token'], 500); } return response()-&gt;json([ 'token' =&gt; $token ]); } </code></pre> <p>The token generated successfully. But when I need the token to another controller, the token generated unsuccessfully, one of example is in this method :</p> <pre><code> public function index(Request $request) { // this will set the token on the object JWTAuth::parseToken(); // and you can continue to chain methods $user = JWTAuth::parseToken()-&gt;authenticate(); $token = JWTAuth::getToken(); die($token); try { if (! $user = JWTAuth::parseToken()-&gt;authenticate()) { return response()-&gt;json(['user_not_found'], 404); } } catch (Tymon\JWTAuth\Exceptions\TokenExpiredException $e) { return response()-&gt;json(['token_expired'], $e-&gt;getStatusCode()); } catch (Tymon\JWTAuth\Exceptions\TokenInvalidException $e) { return response()-&gt;json(['token_invalid'], $e-&gt;getStatusCode()); } catch (Tymon\JWTAuth\Exceptions\JWTException $e) { return response()-&gt;json(['token_absent'], $e-&gt;getStatusCode()); } </code></pre> <p>Everytime I'd like to <code>JWTAuth::parseToken();</code> I got this error :</p> <blockquote> <p>The token could not be parsed from the request</p> </blockquote> <p>So why this happen? And what should I do? Because In <code>signin</code> method, the token successfully generated, but in <code>index</code> I can't access the token. Thanks for your attention.</p> </div>

Tymon JWT使用数据库提供程序代替eloquent_course

<div class="post-text" itemprop="text"> <p>I'm using <a href="https://github.com/tymondesigns/jwt-auth" rel="nofollow noreferrer">https://github.com/tymondesigns/jwt-auth</a> on my lumen application.</p> <p>Here's my <code>composer.json</code></p> <pre><code>"laravel/lumen-framework": "5.3.*", "tymon/jwt-auth": "^1.0@dev", </code></pre> <p>I've read a of tutorials on how to install. Some of which are:</p> <ul> <li><a href="https://scotch.io/tutorials/role-based-authentication-in-laravel-with-jwt" rel="nofollow noreferrer">https://scotch.io/tutorials/role-based-authentication-in-laravel-with-jwt</a></li> <li><a href="https://laravelista.com/posts/json-web-token-authentication-for-lumen" rel="nofollow noreferrer">https://laravelista.com/posts/json-web-token-authentication-for-lumen</a></li> </ul> <p>I am able to make it work on my local and successfully return the token. But the problem is that instead of using eloquent on the provider that fetches data from <code>database.sqlite</code>, I want to use database as my driver.</p> <p>With that, I have set</p> <pre><code>'providers' =&gt; [ 'users' =&gt; [ 'driver' =&gt; 'database', 'table' =&gt; 'user_table', // 'driver' =&gt; 'eloquent', // 'model' =&gt; App\User::class, ], ], </code></pre> <p>on my <code>config/auth.php</code></p> <p>Since it is now connection thru a database, it now uses the <code>DatabaseUserProvider.php</code></p> <p>I need to modify some codes though.</p> <pre><code>/** * Validate a user against the given credentials. * * @param \Illuminate\Contracts\Auth\Authenticatable $user * @param array $credentials * @return bool */ public function validateCredentials(UserContract $user, array $credentials) { $plain = $credentials['password']; return $this-&gt;hasher-&gt;check($plain, app('hash')-&gt;make($user-&gt;getAuthPassword())); } </code></pre> <p>Notice that I added a <code>app('hash')-&gt;make()</code> when validating the password.</p> <p>It then inject the retrieved user into the <code>GenericUser</code> object.</p> <pre><code>/** * Get the generic user. * * @param mixed $user * @return \Illuminate\Auth\GenericUser|null */ protected function getGenericUser($user) { if (! is_null($user)) { return new GenericUser((array) $user); } } </code></pre> <p>Since it is on the <code>GenericUser</code> object, it gives an error of:</p> <pre><code>Argument 1 passed to Tymon\JWTAuth\JWT::fromUser() must be an instance of Tymon\JWTAuth\Contracts\JWTSubject, instance of Illuminate\Auth\GenericUser given </code></pre> <p>In order to fix this, I have to "hack" it by removing the <code>JWTSubject</code> injection on every method under the <code>tymon\jwt-auth\src\JWT.php</code></p> <p>Is there a better way to clean this up?</p> </div>

JWT / LARAVEL 5.6刷新过期令牌_course

<div class="post-text" itemprop="text"> <p>I developed an API and I have a problem with the expiration of the token, and I try to find ways to refresh the tokens sent by API ,I use custom middleware,When the token is expired, the refreshed token is added to the response headers. The app just needs to search if the response has this, if so, update the saved token.I get </p> <blockquote> <p>{"code":103,"response":null}</p> </blockquote> <p>my middleware </p> <pre><code>&lt;?php namespace App\Http\Middleware; use Carbon\Carbon; use Closure; use Illuminate\Http\JsonResponse; use Illuminate\Http\Response; use Illuminate\Support\Facades\Cache; use Symfony\Component\HttpKernel\Exception\BadRequestHttpException; use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException; use Tymon\JWTAuth\Exceptions\JWTException; use Tymon\JWTAuth\Exceptions\TokenBlacklistedException; use Tymon\JWTAuth\Exceptions\TokenExpiredException; use Tymon\JWTAuth\Facades\JWTAuth; use Tymon\JWTAuth\Http\Middleware\BaseMiddleware; class JwtRefresh extends BaseMiddleware { public function handle($request, Closure $next) { try { if (! $user = JWTAuth::parseToken()-&gt;authenticate() ) { return response()-&gt;json([ 'code' =&gt; 101, // means auth error in the api, 'response' =&gt; null // nothing to show ]); } } catch (TokenExpiredException $e) { // If the token is expired, then it will be refreshed and added to the headers try { $refreshed = JWTAuth::refresh(JWTAuth::getToken()); $user = JWTAuth::setToken($refreshed)-&gt;toUser(); header('Authorization: Bearer ' . $refreshed); } catch (JWTException $e) { return response()-&gt;json([ 'code' =&gt; 103, // means not refreshable 'response' =&gt; null // nothing to show ]); } } catch (JWTException $e) { return response()-&gt;json([ 'code' =&gt; 101, // means auth error in the api, 'response' =&gt; null // nothing to show ]); } // Login the user instance for global usage Auth::login($user, false); return $next($request); } } </code></pre> </div>

Laravel 5重置JWTAuth的密码_course

<div class="post-text" itemprop="text"> <p>I am using JWT Authentication and I am trying to setup a Reset Password api functionality using ResetsPasswords.</p> <p>I have created my own controller for reseting the password to use ResetsPasswords:</p> <pre><code>namespace App\Http\Controllers\v1; use Illuminate\Http\Request; use App\Http\Controllers\Controller; use JWTAuth; use Tymon\JWTAuth\Exceptions\JWTException; use App\Models\PdTlogin; use App\Models\PdTprofessional; use App\Models\PdTpatientPainkiller; use App\Models\PdTprofessionalQualifcation; use App\Models\PdTprofessionalSpeciality; use Config; use LbTtradesman_login; use Auth; use Illuminate\Foundation\Auth\ResetsPasswords; class ResetPasswordController extends Controller { use ResetsPasswords; public function resetPassword(request $request) { return json_encode($this-&gt;reset($request)); } public function __construct() { $this-&gt;middleware('guest'); } } </code></pre> <p>And I am calling the reset function in ResetsPasswords, here is that full controller:</p> <pre><code>namespace Illuminate\Foundation\Auth; use Illuminate\Support\Str; use Illuminate\Http\Request; use Illuminate\Support\Facades\Auth; use Illuminate\Support\Facades\Password; trait ResetsPasswords { use RedirectsUsers; /** * Reset the given user's password. * * @param \Illuminate\Http\Request $request * @return \Illuminate\Http\RedirectResponse */ public function reset(Request $request) { //$this-&gt;validate($request, $this-&gt;rules(), $this-&gt;validationErrorMessages()); // Here we will attempt to reset the user's password. If it is successful we // will update the password on an actual user model and persist it to the // database. Otherwise we will parse the error and return the response. $response = $this-&gt;broker()-&gt;reset( $this-&gt;credentials($request), function ($user, $password) { $this-&gt;resetPassword($user, $password); } ); // If the password was successfully reset, we will redirect the user back to // the application's home authenticated view. If there is an error we can // redirect them back to where they came from with their error message. return $response == Password::PASSWORD_RESET ? $this-&gt;sendResetResponse($response) : $this-&gt;sendResetFailedResponse($request, $response); } /** * Get the password reset validation rules. * * @return array */ protected function rules() { return [ 'token' =&gt; 'required', 'email' =&gt; 'required|email', 'password' =&gt; 'required|confirmed|min:6', ]; } /** * Get the password reset validation error messages. * * @return array */ protected function validationErrorMessages() { return []; } /** * Get the password reset credentials from the request. * * @param \Illuminate\Http\Request $request * @return array */ protected function credentials(Request $request) { return $request-&gt;only( 'email', 'password', 'password_confirmation', 'token' ); } /** * Reset the given user's password. * * @param \Illuminate\Contracts\Auth\CanResetPassword $user * @param string $password * @return void */ protected function resetPassword($user, $password) { $user-&gt;forceFill([ 'password' =&gt; bcrypt($password), 'remember_token' =&gt; Str::random(60), ])-&gt;save(); $this-&gt;guard()-&gt;login($user); } /** * Get the response for a successful password reset. * * @param string $response * @return \Illuminate\Http\RedirectResponse */ protected function sendResetResponse($response) { return trans($response); } /** * Get the response for a failed password reset. * * @param \Illuminate\Http\Request * @param string $response * @return \Illuminate\Http\RedirectResponse */ protected function sendResetFailedResponse(Request $request, $response) { return ['email' =&gt; trans($response)]; } /** * Get the broker to be used during password reset. * * @return \Illuminate\Contracts\Auth\PasswordBroker */ public function broker() { return Password::broker('pd_tlogin'); } /** * Get the guard to be used during password reset. * * @return \Illuminate\Contracts\Auth\StatefulGuard */ protected function guard() { return Auth::guard(); } } </code></pre> <p>But when I run everything, my password does not get updated. Instead I get this error:</p> <blockquote> <p>Type error: Argument 1 passed to App\Http\Controllers\v1\ResetPasswordController::resetPassword() must be an instance of Illuminate\Http\Request, instance of App\User given, called in /var/www/html/my_project/vendor/laravel/framework/src/Illuminate/Foundation/Auth/ResetsPasswords.php on line 45</p> </blockquote> <p>I really don't understand this error or what I am doing wrong :( All I know is that my User model is <code>App\Models\PdTlogin</code> with the database table name of <code>pd_tlogin</code></p> <p><strong>UPDATE</strong></p> <p>I have also tried this:</p> <pre><code>public function resetPassword(request $request) { $this-&gt;validate($request, [ 'token' =&gt; 'required', 'email' =&gt; 'required|email', 'password' =&gt; 'required|confirmed', ]); $credentials = $request-&gt;only( 'email', 'password', 'password_confirmation', 'token' ); $response = $this-&gt;passwords-&gt;reset($credentials, function($user, $password) { $user-&gt;password = bcrypt($password); $user-&gt;save(); $this-&gt;auth-&gt;login($user); }); return json_encode($response); } </code></pre> <p>But I got this error:</p> <blockquote> <p>Undefined property: App\Http\Controllers\v1\ResetPasswordController::$passwords', '/var/www/html/my_project/app/Http/Controllers/v1/ResetPasswordController.php</p> </blockquote> </div>

改进json格式数据中的JWT异常处理_course

<div class="post-text" itemprop="text"> <p>Hi i am currently having a problem about JWT Exception JSON Message. The problem is when i checkIn but my token is expired and i received this</p> <pre><code>"message": "Token has expired", "exception": "Tymon\\JWTAuth\\Exceptions\\TokenExpiredException", "file": "C:\\Users\\Snowfox1991\\Desktop\\Capstone project\\back-end\\back-end\\vendor\\tymon\\jwt-auth\\src\\Claims\\Expiration.php", "line": 31, </code></pre> <p>But when i write the getAuthUser() in APIController, i use try catch this one</p> <pre><code>public function getAuthUser(Request $request) { $this-&gt;validate($request, [ 'token' =&gt; 'required' ]); $user = JWTAuth::authenticate($request-&gt;token); try { if (!$user = JWTAuth::parseToken()-&gt;authenticate()) { return response()-&gt;json(['user_not_found'], 404); } } catch (Tymon\JWTAuth\Exceptions\TokenExpiredException $e) { response()-&gt;json([ 'status' =&gt; 'error', 'message' =&gt; 'Token has expired' ], $e-&gt;getStatusCode() } catch (Tymon\JWTAuth\Exceptions\TokenInvalidException $e) { response()-&gt;json([ 'status' =&gt; 'error', 'message' =&gt; 'Token is invalid' ], $e-&gt;getStatusCode() } catch (Tymon\JWTAuth\Exceptions\JWTException $e) { response()-&gt;json([ 'status' =&gt; 'error', 'message' =&gt; 'Token is absent' ], $e-&gt;getStatusCode() // } return response()-&gt;json(['user' =&gt; $user]); } </code></pre> <p>And it still return the same as the original without the json format. Can i ask how to improve this exception using json format without handling the error like this. Thank you</p> </div>

使用laravel 5.1和jwt使用cookie进行身份验证_course

<div class="post-text" itemprop="text"> <p>I'm setting up a laravel app (v5.1) with jwt auth (<a href="https://github.com/tymondesigns/jwt-auth" rel="nofollow">https://github.com/tymondesigns/jwt-auth</a>). Got a boilerplate from this project: <a href="https://github.com/francescomalatesta/laravel-api-boilerplate-jwt" rel="nofollow">https://github.com/francescomalatesta/laravel-api-boilerplate-jwt</a> . This way I want to be able to authenticate different apps in the future.</p> <p>My problem is that I'm trying to create some protected pages in the same project, but I'm currently unable to stop users without the cookie (not authenticated). To "protect" the access I have the following values in my $routeMiddleware (in Kernel.php): </p> <pre><code>'csrf' =&gt; \csd\Http\Middleware\VerifyCsrfToken::class, 'auth' =&gt; \csd\Http\Middleware\Authenticate::class, 'auth.basic' =&gt; \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class, 'guest' =&gt; \csd\Http\Middleware\RedirectIfAuthenticated::class, 'jwt.refresh' =&gt; \Tymon\JWTAuth\Middleware\RefreshToken::class </code></pre> <p>I also tried to add <strong>'jwt.auth' =&gt; \Tymon\JWTAuth\Middleware\GetUserFromToken::class</strong> to this array, but nothing changed.</p> <p>How can I block users from accessing my pages while using this jwt-auth? </p> <p>Thanks in advance.</p> </div>

如何在Laravel中有两个不同的表进行身份验证？ （JWT）_course

<div class="post-text" itemprop="text"> <p>I have a mobile application(mobile_users) and a backend to manage the system(system_users) i want to manage them in <strong>separate tables</strong> so basically to communicate with the mobile application i'm trying to use an api with <code>JWT</code> enabled and for the backend i'm using default auth method in laravel.</p> <p>My problem is when i try to change the auth table for JWT it keeps on accessing the system_users table, even though the documentation says you can change the default <strong>User model path</strong> i tried changing but no luck,</p> <p>Please help me with this,</p> <p>I'm using <a href="https://github.com/tymondesigns/jwt-auth" rel="nofollow noreferrer">https://github.com/tymondesigns/jwt-auth</a> this library for JWT,</p> <p>My Database Structure will be,</p> <pre><code>mobile_users_table = authentication using JWT system_users_table = default laravel auth </code></pre> <p><strong>api.php</strong></p> <pre><code>use Illuminate\Http\Request; /* |-------------------------------------------------------------------------- | API Routes |-------------------------------------------------------------------------- | | Here is where you can register API routes for your application. These | routes are loaded by the RouteServiceProvider within a group which | is assigned the "api" middleware group. Enjoy building your API! | */ Route::post('auth', 'Api\v1\AuthController@authenticate'); Route::get('auth/me', 'Api\v1\AuthController@getAuthenticatedUser'); Route::get('validate', function () { return "cool"; })-&gt;middleware('jwt.auth'); </code></pre> <p><strong>AppUser.php</strong></p> <pre><code>namespace App; use Illuminate\Database\Eloquent\Model; class AppUser extends Model { // } </code></pre> <p><strong>AuthController.php</strong></p> <pre><code>namespace App\Http\Controllers\Api\v1; use Illuminate\Http\Request; use App\Http\Controllers\Controller; use JWTAuth; use Tymon\JWTAuth\Exceptions\JWTException; class AuthController extends Controller { public function authenticate(Request $request) { // grab credentials from the request $credentials = $request-&gt;only('email', 'password'); try { // attempt to verify the credentials and create a token for the user if (! $token = JWTAuth::attempt($credentials)) { return response()-&gt;json(['error' =&gt; 'invalid_credentials'], 401); } } catch (JWTException $e) { // something went wrong whilst attempting to encode the token return response()-&gt;json(['error' =&gt; 'could_not_create_token'], 500); } // all good so return the token return response()-&gt;json(compact('token')); } public function getAuthenticatedUser() { try { if (! $user = JWTAuth::parseToken()-&gt;authenticate()) { return response()-&gt;json(['user_not_found'], 404); } } catch (Tymon\JWTAuth\Exceptions\TokenExpiredException $e) { return response()-&gt;json(['token_expired'], $e-&gt;getStatusCode()); } catch (Tymon\JWTAuth\Exceptions\TokenInvalidException $e) { return response()-&gt;json(['token_invalid'], $e-&gt;getStatusCode()); } catch (Tymon\JWTAuth\Exceptions\JWTException $e) { return response()-&gt;json(['token_absent'], $e-&gt;getStatusCode()); } // the token is valid and we have found the user via the sub claim return response()-&gt;json(compact('user')); } } </code></pre> <p><strong>jwt.php</strong></p> <pre><code>/* |-------------------------------------------------------------------------- | User Model namespace |-------------------------------------------------------------------------- | | Specify the full namespace to your User model. | e.g. 'Acme\Entities\User' | */ 'user' =&gt; 'App\AppUser', </code></pre> </div>

Laravel phpunit无法修改标题信息 - 已发送的标题_course

<div class="post-text" itemprop="text"> <p>I've gone around the multiple posts around the same issue and it can't seem to cover my case.</p> <p>My idea:</p> <p>I'm using JWT to authenticate users and my idea is to determine that whenever a token is nearly expiration date, I want to return a new token within the headers (Header Authorization).</p> <p>I've got this middleware made, just to test some things out</p> <pre><code>public function handle($request, Closure $next) { try { $user = JWTAuth::parseToken()-&gt;authenticate(); $claims = JWTAuth::getPayload(JWTAuth::getToken())-&gt;toArray(); if ($claims['exp'] - (strtotime(date("Y-m-d H:i:s"))) &lt;= 900) { $token = JWTAuth::refresh(JWTAuth::getToken()); header('Authorization: Bearer ' . $token); } } catch (Exception $e) { if ($e instanceof \Tymon\JWTAuth\Exceptions\TokenInvalidException) { return $this-&gt;response([], 'Authorization Token is Invalid', 401); } elseif ($e instanceof \Tymon\JWTAuth\Exceptions\TokenExpiredException) { try { $token = JWTAuth::refresh(JWTAuth::getToken()); header('Authorization: Bearer ' . $token); return $this-&gt;response([], 'Authorization Token is Expired', 401); } catch (\Tymon\JWTAuth\Exceptions\JWTException $e) { return $this-&gt;response([], 'Authorization Token is Invalid', 401); } } else { return $this-&gt;response([], 'Authorization Token not found', 401); } } return $next($request); } </code></pre> <p>So far so good, testing with POSTMAN I get my desirable outcome. However, I went along to write down an acceptance test in order to test that indeed, this is correct.</p> <pre><code>public function testUserReceivesNewTokenInHeaderWhenExpiresAtIsWithin15Minutes() { //Arrange $token = JWTAuth::claims(['exp' =&gt; strtotime("+1 minutes", strtotime(date('Y-m-d H:i:s')))])-&gt;fromUser($this-&gt;user); $this-&gt;headers['HTTP_Authorization'] = "Bearer $token"; //Act $response = $this-&gt;get('/api/justAnotherURL', $this-&gt;headers); //Assert $response-&gt;assertStatus(200); $this-&gt;assertTrue($response-&gt;headers-&gt;has('Authorization')); } </code></pre> <p>I set the <code>exp</code> date to be within the next minute (so it enters the validation above), it does enter as expected, but when it reaches <code>Header(Authorization: Bearer $token)</code>, it throws an <code>Exception</code>:</p> <blockquote> <p>Cannot modify header information - headers already sent by (output started at /var/www/project/vendor/phpunit/phpunit/src/Util/Printer.php:109)</p> </blockquote> <p>As far as my research goes (and attempts), it's something about outputting the request on the console, but I've been unsuccessful so far. </p> <blockquote> <p>Related post: <a href="https://stackoverflow.com/questions/8028957/how-to-fix-headers-already-sent-error-in-php?noredirect=1&amp;lq=1">How to fix "Headers already sent" error in PHP</a></p> </blockquote> <p>Small notes:</p> <p><code>this-&gt;response</code> is my own custom response to the request, you can ignore that</p> <p>Tried <code>@runInSeparateProcess</code> from another post and error dissapears, but the header isn't set (default header is returned)</p> <p>Edit: I've tried placing the header at the top of the file, before the try catch and it remains the same (I was wondering if jwt would make some output without me knowing) and this is the only middleware being used atm</p> </div>

内核中的Auth声明和laravel中的路由无法正常工作_course

<div class="post-text" itemprop="text"> <p>I had used JWT middleware for my one of the application. My code is worked after some research but I have not understood the actual reason behind that. </p> <p>I had introduced auth in kernel.php below is my code.</p> <pre><code>namespace App\Http; use Illuminate\Foundation\Http\Kernel as HttpKernel; class Kernel extends HttpKernel { .... .... protected $routeMiddleware = [ .... 'jwt-auth' =&gt; \App\Http\Middleware\jwtMiddleware::class, ]; </code></pre> <p>i am using <strong>'jwt-auth'</strong> as the jwt middleware.</p> <p>but when using in routing. tried to use like <strong>jwt-auth</strong> but It will not work. then after some research used <strong>jwt.auth</strong> then working correctly. so why it's used by the <strong>.</strong> not <strong>-</strong>. logically we make auth with name <strong>jwt-auth</strong>.</p> <p>Any help or idea will be appreciated.</p> <pre><code>Route::group(['middleware' =&gt; ['jwt.auth','api-header']], function () { // all routes to protected resources are registered here Route::get('users/list', function(){ $users = App\User::all(); $response = ['success'=&gt;true, 'data'=&gt;$users]; return response()-&gt;json($response, 201); }); }); </code></pre> <p>The same thing I was used for different middleware for including API header with <strong>-</strong> but it will work same as the kernel alias. </p> </div>