Laravel 7 教程：使用 Passport 来构建 API

作者: 八重樱勿忘 | 来源:发表于2020-06-10 20:58 被阅读0次

今天我们要进行 Laravel Api 认证请按照以下步骤进行应用程序身份验证和授权

第一步

执行以下命令：

composer require laravel/passport

php artisan migrate

php artisan passport:install

第二部

修改 config/auth.php 文件中的 Gurds：

...

'guards' => [

'web' => [

'driver' => 'session',

'provider' => 'users',

],

'api' => [

'driver' => 'passport',

'provider' => 'users',

],

],

...

第三步

app/User.php

<?php

namespace App;

use Illuminate\Foundation\Auth\User as Authenticatable;

use Illuminate\Notifications\Notifiable;

use Laravel\Passport\HasApiTokens;

class User extends Authenticatable {

use Notifiable, HasApiTokens;

/**

* The attributes that are mass assignable.

*

* @var array

*/

protected $fillable = [

'name', 'email', 'password',

];

/**

* The attributes that should be hidden for arrays.

*

* @var array

*/

protected $hidden = [

'password', 'remember_token',

];

/**

* The attributes that should be cast to native types.

*

* @var array

*/

protected $casts = [

'email_verified_at' => 'datetime',

];

}

第四步

app/Repositories/User/UserRepositoryInterface.php

<?php

namespace App\Repositories\User;

use Illuminate\Http\Request;

interface UserRepositoryInterface {

public function register(Request $request);

public function login(Request $request);

public function refreshToken(Request $request);

public function details();

public function logout(Request $request);

public function response($data, int $statusCode);

public function getTokenAndRefreshToken(string $email, string $password);

public function sendRequest(string $route, array $formParams);

public function getOClient();

}

第五步

创建 app/Repositories/User/UserRepository.php 文件

<?php

namespace App\Repositories\User;

use App\User;

use GuzzleHttp\Client;

use Illuminate\Http\Request;

use Illuminate\Support\Facades\Auth;

use Laravel\Passport\Client as OClient;

use GuzzleHttp\Exception\ClientException;

use App\Repositories\User\UserRepositoryInterface;

class UserRepository implements UserRepositoryInterface {

const SUCCUSUS_STATUS_CODE = 200;

const UNAUTHORISED_STATUS_CODE = 401;

const BASE_URL = "http://mylemp-nginx";

public function __construct(Client $client) {

$this->http = $client;

}

public function register(Request $request) {

$email = $request->email;

$password = $request->password;

$input = $request->all();

$input['password'] = bcrypt($input['password']);

User::create($input);

$response = $this->getTokenAndRefreshToken($email, $password);

return $this->response($response["data"], $response["statusCode"]);

}

public function login(Request $request) {

$email = $request->email;

$password = $request->password;

if (Auth::attempt(['email' => $email, 'password' => $password])) {

$response = $this->getTokenAndRefreshToken($email, $password);

$data = $response["data"];

$statusCode = $response["statusCode"];

} else {

$data = ['error'=>'Unauthorised'];

$statusCode = self::UNAUTHORISED_STATUS_CODE;

}

return $this->response($data, $statusCode);

}

public function refreshToken(Request $request) {

if (is_null($request->header('Refreshtoken'))) {

return $this->response(['error'=>'Unauthorised'], self::UNAUTHORISED_STATUS_CODE);

}

$refresh_token = $request->header('Refreshtoken');

$Oclient = $this->getOClient();

$formParams = [ 'grant_type' => 'refresh_token',

'refresh_token' => $refresh_token,

'client_id' => $Oclient->id,

'client_secret' => $Oclient->secret,

'scope' => '*'];

return $this->sendRequest("/oauth/token", $formParams);

}

public function details() {

$user = Auth::user();

return $this->response($user, self::SUCCUSUS_STATUS_CODE);

}

public function logout(Request $request) {

$request->user()->token()->revoke();

return $this->response(['message' => 'Successfully logged out'], self::SUCCUSUS_STATUS_CODE);

}

public function response($data, int $statusCode) {

$response = ["data"=>$data, "statusCode"=>$statusCode];

return $response;

}

public function getTokenAndRefreshToken(string $email, string $password) {

$Oclient = $this->getOClient();

$formParams = [ 'grant_type' => 'password',

'client_id' => $Oclient->id,

'client_secret' => $Oclient->secret,

'username' => $email,

'password' => $password,

'scope' => '*'];

return $this->sendRequest("/oauth/token", $formParams);

}

public function sendRequest(string $route, array $formParams) {

try {

$url = self::BASE_URL.$route;

$response = $this->http->request('POST', $url, ['form_params' => $formParams]);

$statusCode = self::SUCCUSUS_STATUS_CODE;

$data = json_decode((string) $response->getBody(), true);

} catch (ClientException $e) {

echo $e->getMessage();

$statusCode = $e->getCode();

$data = ['error'=>'OAuth client error'];

}

return ["data" => $data, "statusCode"=>$statusCode];

}

public function getOClient() {

return OClient::where('password_client', 1)->first();

}

}

第六步

app/Http/Requests/UserLoginRequest.php

<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

use Illuminate\Contracts\Validation\Validator;

use Illuminate\Http\Exceptions\HttpResponseException;

class UserLoginRequest extends FormRequest {

const UNPROCESSABLE_ENTITY = 422;

public function rules() {

return [

'email' => 'required|email',

'password' => 'required',

];

}

protected function failedValidation(Validator $validator) {

throw new HttpResponseException(response()->json($validator->errors(), self::UNPROCESSABLE_ENTITY));

}

}

第七步

app/Http/Requests/UserRegisterRequest.php

<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

use Illuminate\Contracts\Validation\Validator;

use Illuminate\Http\Exceptions\HttpResponseException;

class UserRegisterRequest extends FormRequest {

const UNPROCESSABLE_ENTITY = 422;

public function rules() {

return [

'name' => 'required',

'email' => 'required|email|unique:users',

'password' => 'required',

'c_password' => 'required|same:password',

];

}

protected function failedValidation(Validator $validator) {

throw new HttpResponseException(response()->json($validator->errors(), self::UNPROCESSABLE_ENTITY));

}

}

第八步

app/Providers/AppServiceProvider.php

<?php

namespace App\Providers;

use App\Repositories\User\UserRepository;

use App\Repositories\User\UserRepositoryInterface;

use Illuminate\Support\ServiceProvider;

class AppServiceProvider extends ServiceProvider {

/**

* Register any application services.

*

* @return void

*/

public function register() {

$this->app->bind(UserRepositoryInterface::class, UserRepository::class);

}

/**

* Bootstrap any application services.

*

* @return void

*/

public function boot() {

//

}

}

第九步

app/Providers/AuthServiceProvider.php

<?php

namespace App\Providers;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;

use Laravel\Passport\Passport;

class AuthServiceProvider extends ServiceProvider {

/**

* The policy mappings for the application.

*

* @var array

*/

protected $policies = [

// 'App\Model' => 'App\Policies\ModelPolicy',

];

/**

* Register any authentication / authorization services.

*

* @return void

*/

public function boot() {

$this->registerPolicies();

Passport::routes();

}

}

第十步

app/Http/Controllers/UserController.php

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;

use App\Http\Requests\UserLoginRequest;

use App\Http\Requests\UserRegisterRequest;

use App\Repositories\User\UserRepositoryInterface;

class UserController extends Controller {

const SUCCUSUS_STATUS_CODE = 200;

const UNAUTHORISED_STATUS_CODE = 401;

public function __construct(UserRepositoryInterface $userRepository) {

$this->userRepository = $userRepository;

}

public function login(UserLoginRequest $request) {

$response = $this->userRepository->login($request);

return response()->json($response["data"], $response["statusCode"]);

}

public function register(UserRegisterRequest $request) {

$response = $this->userRepository->register($request);

return response()->json($response["data"], $response["statusCode"]);

}

public function details() {

$response = $this->userRepository->details();

return response()->json($response["data"], $response["statusCode"]);

}

public function logout(Request $request) {

$response = $this->userRepository->logout($request);

return response()->json($response["data"], $response["statusCode"]);

}

public function refreshToken(Request $request) {

$response = $this->userRepository->refreshToken($request);

return response()->json($response["data"], $response["statusCode"]);

}

}

第十一步

routes/api.php

<?php

use Illuminate\Support\Facades\Route;

Route::post('login', 'UserController@login');

Route::post('register', 'UserController@register');

Route::post('refreshtoken', 'UserController@refreshToken');

Route::group(['middleware' => ['auth:api']], function () {

Route::post('logout', 'UserController@logout');

Route::post('details', 'UserController@details');

});

测试

打开 postman 增加请求头

Accept : application/json

然后这样处理

你可以在这儿找到源代码

今天我们要进行 Laravel Api 认证请按照以下步骤进行应用程序身份验证和授权

原文地址：https://dev.to/azibom/how-do-you-make-la... 译文地址：https://learnku.com/laravel/t/45708 a

我的官方群点击此处。链接加入群聊【PHP/web/高级学习交流群】,一起学习，相互讨论。

群内已经有管理将知识体系整理好（源码，学习视频等资料），欢迎加群免费领取。

这套精品PHP教程绝不是市场上的那些妖艳贱货可比，作为web开发的佼佼者PHP并不逊色其他语言，加上Swoole后更加是如虎添翼！进军通信、物联网行业开发百度地图、百度订单中心、虎牙、战旗TV等！寒冬裁员期过后正是各大企业扩大招人的时期，现在市场初级程序员泛滥，进阶中高级程序员绝对是各大企业急需的人才，这套学习教程适合那些1-5年以内的PHP开发者正处于瓶颈期，想要突破自己进阶中高级、架构师！名额有限，先到先得！

腾讯T3-T4标准精品PHP架构师教程目录大全，只要你看完保证薪资上升一个台阶（持续更新）

部分资料截图：

还有限时精品福利：

★腾讯高级PHP工程师笔试题目

★亿级PV高并发场景订单的处理

★laravel开发天猫商城组件服务

★战旗TV视频直播的架构项目实战

扫描下面二维码领取

对PHP后端技术，对PHP架构技术感兴趣的朋友，我的官方群点击此处，一起学习，相互讨论。

群内已经有管理将知识体系整理好（源码，学习视频等资料），欢迎加群免费领取。

本课程深度对标腾讯T3-T4标准，贴身打造学习计划为web开发人员进阶中高级、架构师提升技术，为自己增值涨薪！加入BAT特训营还可以获得内推大厂名额以及GO语言学习权限！！！

网友评论

本文标题：Laravel 7 教程：使用 Passport 来构建 API

本文链接：https://www.haomeiwen.com/subject/ktfmtktx.html

延伸阅读

深度阅读

您也可以注册成为美文阅读网的作者，发表您的原创作品、分享您的心情！