我正在尝试创建基本的JWT令牌身份验证。
我使用Laravel作为我的后端API,使用tymon/jwt-auth创建令牌/刷新令牌并提供中间件来检查令牌。
我使用AngularJS与Satellizer将返回的令牌存储在本地存储中,并将该令牌发送给所有未来请求。
我使用Laravel 5.1 / Jwt-auth 0.5.* / AngularJs 1.4.7 / Satellizer(最新版本)。
我登录后,令牌被存储在我的本地存储中。然后,我尝试调用authenticate的索引来“获取所有用户”,授权标头带有Bearer <token stored in local storage>
,但我得到了“token_not_provided”的响应,就好像中间件没有在授权标头中查找令牌一样。这里是我的一些代码。我遵循https://scotch.io/tutorials/token-based-authentication-for-angularjs-and-laravel-apps。
AuthenticateController.php:
<?php namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\Http\Requests;
use App\Http\Controllers\Controller;
use JWTAuth;
use Tymon\JWTAuth\Exceptions\JWTException;
use App\User;
class AuthenticateController extends Controller
{
public function __construct()
{
// Apply the jwt.auth middleware to all methods in this controller
// except for the authenticate method. We don't want to prevent
// the user from retrieving their token if they don't already have it
$this->middleware('jwt.auth', ['except' => ['authenticate']]);
}
public function index()
{
// Retrieve all the users in the database and return them
$users = User::all();
return $users;
}
public function authenticate(Request $request)
{
$credentials = $request->only('email', 'password');
try {
// verify the credentials and create a token for the user
if (!$token = JWTAuth::attempt($credentials)) {
return response()->json(['error' => 'invalid_credentials'], 401);
}
} catch (JWTException $e) {
// something went wrong
return response()->json(['error' => 'could_not_create_token'], 500);
}
// if no errors are encountered we can return a JWT
return response()->json(compact('token'));
}
}