aikrof/jwt-auth
Composer 安装命令:
composer require aikrof/jwt-auth
包简介
Simple JSON Web Token Authentication for Laravel
README 文档
README
1. Instalation
composer require aikrof/jwt-auth
2. Add service provider
Add the service provider to the providers array in the config/app.php config file:
'providers' => [
...
Aikrof\JwtAuth\Providers\JwtServiceProvider::class,
...
],
3. Publish the config file
php artisan vendor:publish --provider="Aikrof\JwtAuth\Providers\JwtServiceProvider"
This command will be create config/jwt.php file with basics configure.
4. Migrate table
Create table where will be stored invalid tokens.
php artisan migrate
5. Generate secret and refresh keys
php artisan create:secret
This command will create JWT_SECRET_KEY and JWT_REFRESH_KEY in your .env file.
6. Configure Auth guard
Inside the config/auth.php file change:
'defaults' => [
'guard' => 'api',
'passwords' => 'users',
],
...
'guards' => [
...
'api' => [
'driver' => 'jwt',
'provider' => 'users',
],
],
Set api guard as the default and add jwt driver to api guard
7. Update your User model
Add trait to your User model:
1)Implement the Aikrof\JwtAuth\JwtCreator
2)Then add trait use JwtCreator
namespace App;
use Illuminate\Notifications\Notifiable;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Aikrof\JwtAuth\JwtCreator;
class User extends Authenticatable
{
use JwtCreator, Notifiable;
....
}
8. Usage
1)Set tokens time to live
1. Set token time to live
By default token time to live (ttl) is 1 week,
you can change ttl in config/jwt.php file or
when create new token:
Auth::user()->setTtl(2);
Example sets token time to live by 2 minutes.
setTtl() -takes parameter in minutes.
1. Set refresh token time to live
By default refresh token time to live is token ttl * 2,
you can change refreshTtl in config/jwt.php file or
when create new token:
Auth::user()->setRefreshTtl(4);
Example sets token time to live by 4 minutes.
setRefreshTtl() -takes parameter in minutes.
2)Create JWT token and refresh token
Auth::token();
Or with setTtl() or setRefreshTtl()
Auth::user()->setTtl(2)->setRefreshTtl()->token();
Will be returned array with this fields:
[
'token' => '...',
'refresh' => '...'
]
3)Get tokens time to live
1. To get token time to live in minutes
Auth::user()->getTtl();
To get token time to live in UNIX timestamp
Auth::user()->getExpTtl();
2. To get refresh token time to live in minutes
Auth::user()->getRefreshTtl();
To get refresh token time to live in UNIX timestamp
Auth::user()->getRefreshExpTtl();
4)Logout user
Log the user out - which will invalidate the current token and unset the authenticated user.
Auth::logout();
5)Refresh JWT tokens
Refresh a token, which invalidates the current one and returned new token and refresh token.
Auth::refresh();
If jwt token was invalid or have invalid data then will be returned null.
aikrof/jwt-auth 适用场景与选型建议
aikrof/jwt-auth 是一款 基于 PHP 开发的 Composer 扩展包,目前已累计 9 次下载、GitHub Stars 达 0, 最近一次更新时间为 2019 年 11 月 01 日, 在 PHP 生态内属于活跃度较高的组件。
它主要适用于以下技术方向: 「Authentication」 「auth」 「jwt」 「JSON Web Token」 等业务场景。在实际项目中,围绕这些方向常见需要落地的问题包括:接口对接、性能调优、并发安全、与既有框架(Laravel / ThinkPHP / Yii / Webman 等)的兼容适配,以及生产环境的日志埋点与稳定性保障。
我们在过去多个企业项目中使用过 aikrof/jwt-auth 或与其功能相近的方案,如果你在选型或落地过程中遇到问题,例如 版本兼容、二次改造、私有化封装、与内部系统对接、生产 BUG 排查,欢迎联系我们协助评估。
基于 aikrof/jwt-auth 在你已有业务上做功能扩展、字段裁剪、UI 适配、与内部账号 / 权限 / 日志系统的深度对接。
线上偶发问题、内存泄漏、慢查询、并发异常等排查修复;针对高流量场景做缓存、队列、索引层面的调优。
承接完整的项目从需求 → 设计 → 开发 → 上线 → 长期运维;也可按月提供技术保姆服务。
与 aikrof/jwt-auth 相关的其它包
同方向 / 同关键字的高下载量 PHP Composer 包推荐,方便对比选型:
Laravel Multiauth package
Automatically logs-in users if they are already authenticated by a remote source. (e.g. environment variable REMOTE_USER)
GraphQL authentication for your headless Craft CMS applications.
A lightweight and powerful OAuth 2.0 authorization and resource server library with support for all the core specification grants. This library will allow you to secure your API with OAuth and allow your applications users to approve apps that want to access their data from your API.
A simple library to decode and parse Apple Sign In client tokens.
Laravel middleware to restrict a site or specific routes using HTTP basic authentication
统计信息
- 总下载量: 9
- 月度下载量: 0
- 日度下载量: 0
- 收藏数: 0
- 点击次数: 8
- 依赖项目数: 0
- 推荐数: 0
其他信息
- 授权协议: MIT
- 更新时间: 2019-11-01