lumen5.4 中使用jwt-auth生成token

这只是一次测试的使用，有点粗糙，万变不离其中，感谢大神的博客做参考
https://blog.csdn.net/tangzwgo/article/details/55195207

一、安装lumen5.4

composer create-project --prefer-dist laravel/lumen  api   '5.4.*'
                                                    项目名称   指定的框架版本

JWT-Auth 的托管地址 https://github.com/tymondesigns/jwt-auth

二、composer安装 tymon/jwt-auth 扩展包

1.在composer.json 中 添加 "tymon/jwt-auth": "1.0.*@dev",

2. 再执行 composer update （不出意外的话就安装好了）

   "require": {
       "php": ">=5.6.4",
       "laravel/lumen-framework": "5.4.*",
       "vlucas/phpdotenv": "~2.2",
       "maatwebsite/excel": "^2.1",
       "dingo/api": "1.0.*@dev",
       "tymon/jwt-auth": "1.0.*@dev",
       "laravel-doctrine/orm": "1.3.*"
   },

三、修改bootstrap/app.php文件 配置secret

  - 去掉$app->withFacades();前的注释
  - 去掉$app->withEloquent();前的注释
  - 找到 Register Service Providers项，添加 $app->register(Tymon\JWTAuth\Providers\LumenServiceProvider::class);
  - 执行php artisan jwt:secret 命令生成jwt的secret

四、创建auth文件

在app的同级目录创建config文件夹再新建auth.php文件 config/auth.php，内容为：

 [
        'guard' => env('AUTH_GUARD', 'api'),
        'passwords' => 'users',
    ],

/*
    |--------------------------------------------------------------------------
    | Authentication Guards
    |--------------------------------------------------------------------------
    |
    | Next, you may define every authentication guard for your application.
    | Of course, a great default configuration has been defined for you
    | here which uses session storage and the Eloquent user provider.
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | Supported: "token"
    |
    */

    'guards' => [
        'api' => [
            'driver' => 'jwt',
            'provider' => 'users'
        ],
    ],

/*
    |--------------------------------------------------------------------------
    | User Providers
    |--------------------------------------------------------------------------
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | If you have multiple user tables or models you may configure multiple
    | sources which represent each model / table. These sources may then
    | be assigned to any extra authentication guards you have defined.
    |
    | Supported: "database", "eloquent"
    |
    */

    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model'  => App\User::class,
        ],
    ],

/*
    |--------------------------------------------------------------------------
    | Resetting Passwords
    |--------------------------------------------------------------------------
    |
    | Here you may set the options for resetting passwords including the view
    | that is your password reset e-mail. You may also set the name of the
    | table that maintains all of the reset tokens for your application.
    |
    | You may specify multiple password reset configurations if you have more
    | than one user table or model in the application and you want to have
    | separate password reset settings based on the specific user types.
    |
    | The expire time is the number of minutes that the reset token should be
    | considered valid. This security feature keeps tokens short-lived so
    | they have less time to be guessed. You may change this as needed.
    |
    */

    'passwords' => [
            //
    ],

];

五、修改app/Providers/AuthServiceProvider.php

app['auth']->viaRequest('api', function ($request) {
            return \App\User::where('email', $request->input('email'))->first();
        });
    }
}

六、修改app/User.php（相当于Model）

getKey();
    }

    public function getJWTCustomClaims()
    {
        return [];
    }
}

七、编写一个获取token的控制器

注意！！！！！！！！！！！！！！！！！！！！！！！！！1
注意！！！！！！！！！！！！！！！！！！！！！！！！！1
在数据库中的密码password 必须是加密过的 哈希密码，不然的话在->attempt 生成token的时候会返回false， 可能由于我计算太菜，在这里整整卡了两天，结果上个厕所回来找到了

image.png

jwt = $jwt;
}

    /**
     * 获取token
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function authenticate(Request $request)
    {
        
        // dd( password_hash("yeyu5520", PASSWORD_DEFAULT) );
        $this->validate($request, [
            'email'    => 'required|email|max:255',
            'password' => 'required',
        ]);

        try {

            if (! $token = app('auth')->guard('api')->attempt($request->only('email', 'password'))) {
                return response()->json(['user_not_found'], 404);
            }
        } catch (TokenExpiredException $e) {
                    return response()->json(['token_expired'], 500);
        } catch (TokenInvalidException $e) {
                    return response()->json(['token_invalid'], 500);
        } catch (JWTException $e) {
                    return response()->json(['token_absent' => $e->getMessage()], 500);
        }

            return response()->json(compact('token'));
    }
}

七、添加一个路由测试

$api->version(['v1'], ['namespace' => 'App\Http\Controllers\Auth'], function($api){
    //获取token
    $api->post('auth/token', 'AuthenticateController@authenticate');
});

image.png

到此就完成了