在laravel使用Token進行使用者認證
首先先安裝拓展包

composer require tymon/jwt-auth 0.5.*

然後在配置中註冊

Tymon\JWTAuth\Providers\JWTAuthServiceProvider::class
.....
'JWTAuth' => Tymon\JWTAuth\Facades\JWTAuth::class
'JWTFactory' => Tymon\JWTAuth\Facades\JWTFactory::class

釋出配置檔案生成金鑰

php artisan vendor:publish --provider="Tymon\JWTAuth
 
\Providers\JWTAuthServiceProvider"
php artisan jwt:generate

然後建立註冊和登入路由

/routes/web.php

Route::post('/register', 'Auth\[email protected]');
Route::post('/login','Auth\[email protected]'); 

去控制器建立註冊使用者方法

app/Http/Controllers/Auth/RegisterController.php
protected function create(array $data){}
public
 
 function register(Request $request)
    {
        $this->validator($request->all())->validate();
        //驗證的規則

        $user = $this->create($request->all());//存資料到資料庫
        $token = JWTAuth::fromUser($user);
        //通過使用者物件例項建立token
        return ["token" => $token];
    }

接下來建立登入的方法,這裡我是用郵箱登入

app/Http/Controllers/Auth/LoginController.php

public function email(Request $request)
    {
        // grab credentials from the request
        $credentials = $request->only('email', 'password');

        try {
            // attempt to verify the credentials and create a token for the user
            if (! $token = JWTAuth::attempt($credentials)) {
                return response()->json(['error' => 'invalid_credentials'], 401);
            }
        } catch (JWTException $e) {
            // something went wrong whilst attempting to encode the token
            return response()->json(['error' => 'could_not_create_token'], 500);
        }

        // all good so return the token
        return response()->json(compact('token'));
    }

之後就會得到

{
“token”:”eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxIiwiaXNzIjoiaHR0cDpcL1wvbG9jYWx
ob3N0OjgwMDFcL2F1dGhcL2xvZ2luIiwiaWF0IjoxNDUxODg4MTE5LCJleHAiOjE0NTQ1MTYxMTksIm5iZiI6MTQ1MTg4OD
}

token可以設定Authorization頭來使用：

Authorization: Bearer {yourtokenhere}

也可以放進URL中使用

使用者完成登入註冊之後就可以設定需要登入後才能訪問的路由,首先到

app/Http/Kernel.php

protected $routeMiddleware = [
    ...
    'jwt.auth' => 'Tymon\JWTAuth\Middleware\GetUserFromToken',
    'jwt.refresh' => 'Tymon\JWTAuth\Middleware\RefreshToken',
];

然後就是設定路由

routes/web.php

Route::group(['middleware' => 'jwt.auth', 'providers' => 'jwt'], function () {
    Route::post('/test', '[email protected]');           
});

這樣就代表在訪問/test路由的時候需要帶有token,登入才能訪問

而獲取使用者資訊則可以在TestController中的test方法中採用

$user = JWTAuth::parseToken()->authenticate();//獲取使用者資訊