学院君 使用 Laravel Passport 实现 API 认证 有大用

composer require laravel/passport

php artisan migrate

php artisan passport:install

<?php

namespace App;

use Laravel\Passport\HasApiTokens;

use Illuminate\Notifications\Notifiable;

use Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable

{

    use HasApiTokens, Notifiable;

}

<?php

namespace App\Providers;

use Laravel\Passport\Passport;

use Illuminate\Support\Facades\Gate;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;

class AuthServiceProvider extends ServiceProvider

{

    /**

     * The policy mappings for the application.

     *

     * @var array

     */

    protected $policies = [

        'App\Model' => 'App\Policies\ModelPolicy',

    ];

    /**

     * Register any authentication / authorization services.

     *

     * @return void

     */

    public function boot()

    {

        $this->registerPolicies();

        Passport::routes();

    }

}

'guards' => [

    'web' => [

        'driver' => 'session',

        'provider' => 'users',

    ],

    'api' => [

        'driver' => 'passport',

        'provider' => 'users',

    ],

],

php artisan vendor:publish --tag=passport-components

Vue.component(

    'passport-clients',

    require('./components/passport/Clients.vue')

);

Vue.component(

    'passport-authorized-clients',

    require('./components/passport/AuthorizedClients.vue')

);

Vue.component(

    'passport-personal-access-tokens',

    require('./components/passport/PersonalAccessTokens.vue')

);

<passport-clients></passport-clients>

<passport-authorized-clients></passport-authorized-clients>

<passport-personal-access-tokens></passport-personal-access-tokens>

php artisan passport:keys

/**

 * 注册任意认证/授权服务

 *

 * @return void

 */

public function boot()

{

    $this->registerPolicies();

    Passport::routes();

    Passport::tokensExpireIn(now()->addDays(15));

    Passport::refreshTokensExpireIn(now()->addDays(30));

}

php artisan passport:client

axios.get('/oauth/clients')

    .then(response => {

        console.log(response.data);

    });

const data = {

    name: 'Client Name',

    redirect: 'http://example.com/callback'

};

axios.post('/oauth/clients', data)

    .then(response => {

        console.log(response.data);

    })

    .catch (response => {

        // List errors on response...

    });

const data = {

    name: 'New Client Name',

    redirect: 'http://example.com/callback'

};

axios.put('/oauth/clients/' + clientId, data)

    .then(response => {

        console.log(response.data);

    })

    .catch (response => {

        // List errors on response...

    });

axios.delete('/oauth/clients/' + clientId)

    .then(response => {

        //

    });

Route::get('/redirect', function () {

    $query = http_build_query([

        'client_id' => 'client-id',

        'redirect_uri' => 'http://example.com/callback',

        'response_type' => 'code',

        'scope' => '',

    ]);

    return redirect('http://your-app.com/oauth/authorize?'.$query);

});

Route::get('/redirect', function (){

    $query = http_build_query([

        'client_id' => '3',

        'redirect_uri' => 'http://laravel55.dev/auth/callback',

        'response_type' => 'code',

        'scope' => '',

    ]);

    return redirect('http://laravel55.dev/oauth/authorize?' . $query);

});

Route::get('/auth/callback', function (\Illuminate\Http\Request $request){

    if ($request->get('code')) {

        return 'Login Success';

    } else {

        return 'Access Denied';

    }

});

php artisan vendor:publish --tag=passport-views

Route::get('/auth/callback', function (Request $request) {

    $http = new GuzzleHttp\Client;

    $response = $http->post('http://laravel55.dev/oauth/token', [

        'form_params' => [

            'grant_type' => 'authorization_code',

            'client_id' => '3',  // your client id

            'client_secret' => 'tBxbskNg9fJTIh0Ufk4eKdpneSkLx1H5HxGy2VTk',   // your client secret

            'redirect_uri' => 'http://laravel55.dev/auth/callback',

            'code' => $request->code,

        ],

    ]);

    return json_decode((string) $response->getBody(), true);

});

$http = new GuzzleHttp\Client;

$response = $http->post('http://laravel55.dev/oauth/token', [

    'form_params' => [

        'grant_type' => 'refresh_token',

        'refresh_token' => 'the-refresh-token',

        'client_id' => 'client-id',

        'client_secret' => 'client-secret',

        'scope' => '',

    ],

]);

return json_decode((string) $response->getBody(), true);

php artisan passport:client --password

Route::get('/auth/password', function (\Illuminate\Http\Request $request){

    $http = new \GuzzleHttp\Client();

    $response = $http->post('http://laravel55.dev/oauth/token', [

        'form_params' => [

            'grant_type' => 'password',

            'client_id' => '2',

            'client_secret' => 'XtkyWdevgTnqbVtWTd8l7ASx76VtBBuZHzlAbCvm',

            'username' => 'yaojinbu@163.com',

            'password' => 'test123',

            'scope' => '',

        ],

    ]);

    return json_decode((string)$response->getBody(), true);

});

$response = $http->post('http://your-app.com/oauth/token', [

    'form_params' => [

        'grant_type' => 'password',

        'client_id' => 'client-id',

        'client_secret' => 'client-secret',

        'username' => 'taylor@laravel.com',

        'password' => 'my-password',

        'scope' => '*',

    ],

]);

/**

 * Register any authentication / authorization services.

 *

 * @return void

 */

public function boot()

{

    $this->registerPolicies();

    Passport::routes();

    Passport::enableImplicitGrant();

}

Route::get('/redirect', function () {

    $query = http_build_query([

        'client_id' => 'client-id',

        'redirect_uri' => 'http://example.com/callback',

        'response_type' => 'token',

        'scope' => '',

    ]);

    return redirect('http://your-app.com/oauth/authorize?'.$query);

});

use Laravel\Passport\Http\Middleware\CheckClientCredentials;

protected $routeMiddleware = [

    'client' => CheckClientCredentials::class,

];

Route::get('/user', function(Request $request) {

    ...

})->middleware('client');

$guzzle = new GuzzleHttp\Client;

$response = $guzzle->post('http://your-app.com/oauth/token', [

    'form_params' => [

        'grant_type' => 'client_credentials',

        'client_id' => 'client-id',

        'client_secret' => 'client-secret',

        'scope' => 'your-scope',

    ],

]);

return json_decode((string) $response->getBody(), true);

php artisan passport:client --personal

$user = App\User::find(1);

// Creating a token without scopes...

$token = $user->createToken('Token Name')->accessToken;

// Creating a token with scopes...

$token = $user->createToken('My Token', ['place-orders'])->accessToken;

axios.get('/oauth/scopes')

    .then(response => {

        console.log(response.data);

    });

axios.get('/oauth/personal-access-tokens')

    .then(response => {

        console.log(response.data);

    });

const data = {

    name: 'Token Name',

    scopes: []

};

axios.post('/oauth/personal-access-tokens', data)

    .then(response => {

        console.log(response.data.accessToken);

    })

    .catch (response => {

        // List errors on response...

    });

axios.delete('/oauth/personal-access-tokens/' + tokenId);

Route::get('/user', function () {

    //

})->middleware('auth:api');

$response = $client->request('GET', '/api/user', [

    'headers' => [

        'Accept' => 'application/json',

        'Authorization' => 'Bearer '.$accessToken,

    ],

]);

use Laravel\Passport\Passport;

Passport::tokensCan([

    'place-orders' => 'Place orders',

    'check-status' => 'Check order status',

]);

Route::get('/redirect', function () {

    $query = http_build_query([

        'client_id' => 'client-id',

        'redirect_uri' => 'http://example.com/callback',

        'response_type' => 'code',

        'scope' => 'place-orders check-status',

    ]);

    return redirect('http://your-app.com/oauth/authorize?'.$query);

});

$token = $user->createToken('My Token', ['place-orders'])->accessToken;

'scopes' => \Laravel\Passport\Http\Middleware\CheckScopes::class,

'scope' => \Laravel\Passport\Http\Middleware\CheckForAnyScope::class,

Route::get('/orders', function () {

    // Access token has both "check-status" and "place-orders" scopes...

})->middleware('scopes:check-status,place-orders');

Route::get('/orders', function () {

    // Access token has either "check-status" or "place-orders" scope...

})->middleware('scope:check-status,place-orders');

use Illuminate\Http\Request;

Route::get('/orders', function (Request $request) {

    if ($request->user()->tokenCan('place-orders')) {

        //

    }

});

'web' => [

    // Other middleware...

    \Laravel\Passport\Http\Middleware\CreateFreshApiToken::class,

],

axios.get('/user')

    .then(response => {

        console.log(response.data);

    });

window.axios.defaults.headers.common = {

    'X-Requested-With': 'XMLHttpRequest',

};

/**

 * The event listener mappings for the application.

 *

 * @var array

 */

protected $listen = [

    'Laravel\Passport\Events\AccessTokenCreated' => [

        'App\Listeners\RevokeOldTokens',

    ],

    'Laravel\Passport\Events\RefreshTokenCreated' => [

        'App\Listeners\PruneOldTokens',

    ],

];

public function testServerCreation()

{

    Passport::actingAs(

        factory(User::class)->create(),

        ['create-servers']

    );

    $response = $this->post('/api/create-server');

    $response->assertStatus(200);

}