[Day30]颁发和注销访问token

安装passport套件

1. 安装套件cmd执行以下
   composer require laravel/passport

2. 在config/app.php档案中到providers配置文件数组中注册 Passport 服务

3. Passport 服务提供者在框架中注册了自己的数据库迁移目录
   所以要进行migrate
   php artisan migrate

4. create "personal access" and "password grant"
   php artisan passport:install

5. 加入身份验证防护选项
   到config\auth.php

   'guards' => [
   'web' => [
       'driver' => 'session',
       'provider' => 'users',
   ],
   
   'api' => [
       'driver' => 'passport',
       'provider' => 'users',
       'hash' => false,
   ],
   ],
   

6. 注册颁发访问令牌和撤销访问令牌、客户端和个人访问令牌所需的路由
   到app\Providers\AuthServiceProvider.php

    public function boot()
    {
        $this->registerPolicies();

        Passport::routes(); // 加上
    }

7. 将辅助方法加入到模型之中
   到app\Models\User.php
   引入以下
   use Laravel\Passport\HasApiTokens;
   然後使用
   use HasApiTokens, HasFactory, Notifiable;

创建身分controller

php artisan make:controller AuthController.php

新增登入登出及注册function

<?php

namespace App\Http\Controllers;

use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class AuthController extends Controller
{
    public function signup(Request $request)
    {
        $validateData = $request->all();
        $user = new User([
            'name' => $validateData['name'],
            'email' => $validateData['email'],
            'password' => bcrypt($validateData['password']),
        ]);
        $user->save();
        return response('success', 201);
    }

    public function login(Request $request)
    {
        $validateData = $request->validate([
            'email' => 'required|string|email',
            'password' => 'required|string'
        ]);
        if (!Auth::attempt($validateData)){
            return response('授权失败', 401);
        }
        $user = $request->user();
        $tokenResult = $user->createToken('Token');
        $tokenResult->token->save();
        return response(['token'=> $tokenResult->accessToken]);
    }

    public function logout(Request $request)
    {
        $request->user()->token()->revoke();
        return response(
            ["message" => "成功登出"]
        );
    }
}

设定路由

到web.php设定路由

Route::post('/signup', 'AuthController@signup'); // 注册
Route::post('/login', 'AuthController@login'); // 登入
Route::group(['middleware'=>'auth:api'], function(){
    Route::get('/logout', 'AuthController@logout');
});

测试

首先注册

注册成功後登入取得token

将token复制到Bearer Token

复制完成後才能够登出，登出後token就失效罗

可以举一反三，将产品路由放置到auth路由内，这样只有登入的人才可以取得产品资讯