自己写的api token授权机制

基于laravel框架 路由自己写啊

class TestController extends Controller
{
    private $redis;

    function __construct()
    {
        $this->redis = Redis::connection();
    }

    public function token()
    {
        //        数据库中的帐号密码验证通过
        //        服务器发放token
        $username = request('username');
        $password = request('password');
        if ($username == "interface" && $password == "12345") {
            $token = md5(time() + mt_rand(1000, 9999));
            $refresh_token = md5($token);
            $this->redis->set($token, $token);
            echo json_encode([
                'access_token' => $token,
                'refresh_token' => $refresh_token,
                'expire_time' => 300,
                'timestamps' => time()
            ]);
            $this->redis->expireAt($token, time() + 300);
            $this->redis->select(1);
            $this->redis->set($refresh_token, $refresh_token);
            $this->redis->expireAt($refresh_token, time() + 36000);
            $this->redis->select(2);
            $oldToken = $this->redis->hGet($username, 'access_token');//获取旧的token
            $oldRefreshToken = $this->redis->hGet($username, 'refresh_token');//获取旧的refresh_token
            $this->redis->hSet($username, 'access_token', $token);
            $this->redis->hSet($username, 'refresh_token', $refresh_token);
            $this->redis->expireAt($username, time() + 36000);
            $this->redis->select(0);
            $this->redis->del($oldToken);
            $this->redis->select(1);
            $this->redis->del($oldRefreshToken);
        } else {
            return response()->json([
                'result_code' => 0,
                'result_info' => 'No authorization!'
            ]);
        }
    }

    public function refresh_token()
    {
        $refresh_token = trim(request('refresh_token'));
        $username = trim(request('username'));
        $this->redis->select(1);
        if ($this->redis->exists($refresh_token)) {
            echo '存在';
            $this->redis->select(2);
            $old_access_token = $this->redis->hGet($username, 'access_token');
            $old_refresh_token = $this->redis->hGet($username, "refresh_token");
            $this->redis->del($username);
            $this->redis->select(0);
            $this->redis->del($old_access_token);
            $this->redis->select(1);
            $this->redis->del($old_refresh_token);
            $this->redis->select(0);
            $access_token = md5(time() + mt_rand(1000, 9999));
            $refresh_token = md5($access_token);
            $this->redis->set($access_token, $access_token);
            echo json_encode([
                'access_token' => $access_token,
                'refresh_token' => $refresh_token
            ]);
            $this->redis->expireAt($access_token, time() + 300);
            $this->redis->select(1);
            $this->redis->set($refresh_token, $refresh_token);
            $this->redis->expireAt($refresh_token, time() + 36000);
            $this->redis->select(2);
            $this->redis->hSet($username, 'access_token', $access_token);
            $this->redis->hSet($username, 'refresh_token', $refresh_token);
            $this->redis->expireAt($username, time() + 36000);
        } else {
            return response()->json([
                'result_code' => 0,
                'result_info' => 'No authorization!'
            ]);
        }
    }

    public function resources()
    {
        $token = request('access_token');
        if ($this->redis->exists($token)) {
            echo "请求成功";
            $this->redis->expireAt($token, time() + 300);
        } else {
            return response()->json([
                'result_code' => 0,
                'result_info' => 'No authorization!'
            ]);
        }
    }
}