這不是一個非常需要答案的問題，但歡迎進一步的建議、答案和建議。我想與全世界分享我是如何解決這個問題的，并希望它能幫助到其他人。Laravel 附帶了幾個預先設計的身份驗證解決方案，您可以使用一些工匠命令啟動它們。這些包括：標準用戶表認證OAuth2（通過 Laravel Passport 包）基于社交媒體的身份驗證（通過 Laravel Socialite 包）盡管所有這些都很有用，但在這個微服務時代，Laravel 并沒有為使用自定義 API 的僅 API 身份驗證提供開箱即用的引導程序。幾個月前我遇到了這個問題，我在谷歌和 Stackoverflow 上搜索了答案。我找到了有助于指明方向的有用文章，并引用了這些文章。了解如何將它們粘合在一起并逐步調試以解決問題需要付出一些努力。提供答案是希望它能幫助其他人 - 以及我自己，因為我將來必須再次做同樣的事情。假設和范圍：您已經創建了自己的 API，例如https://example.com/login和https://example.com/logout你正在運行一個需要身份驗證的網站，但不是通過模型和表格或社交媒體您的 API 管理與表的交互，包括用戶登錄/注銷您使用 Laravel Passport 附加組件進行 OAuth2 身份驗證（感謝@ShuvoJoseph 提醒我注意這一點）
1 回答
RISEBY
TA貢獻1856條經驗 獲得超5個贊
解決方案涉及七個PHP文件
app/Http/Controllers/HomeController.php - 主頁控制器；經過身份驗證的用戶的目的地
app/Providers/ApiUserProvider.php - 用于引導和注冊登錄用戶的自定義提供程序，并實現接口 Illuminate\Contracts\Auth\UserProvider
app/CoreExtensions/SessionGuardExtended.php - 自定義保護控制器以登錄用戶并接收身份驗證值并將它們存儲在會話數組中；擴展類 Illuminate\Auth\SessionGuard
app/ApiUser - 如果你使用的是 OAuth2（Laravel 的 Passport）；公開 OAuth access_token 的自定義用戶類；擴展 Illuminate\Auth\GenericUser 并實現接口 Illuminate\Contracts\Auth\Authenticatable
config/auth.php - 指示 Auth() facade 返回自定義會話保護的 auth 配置
app/Providers/AuthServiceProvider.php - auth bootstrap
app/Providers/AppServiceProvider.php - 主應用程序引導程序
引用源研究/調查材料供您自己調查并理解它們存在的背景。我并沒有聲稱自己是一個通過自己的魔力從頭開始創建解決方案的天才，而是像所有創新者一樣，我建立在其他人的努力之上。我的文章的獨特賣點是我提供了一個完整的打包解決方案，而引用的來源提供了整體答案的小眾部分的解決方案。經過反復試驗，他們一起幫助我形成了一個完整的解決方案。
了解 config/auth.php 如何影響 AuthManager.php 中的執行的真正有用的文章是https://www.2hatslogic.com/blog/laravel-custom-authentication/
未對以下內容進行任何代碼修改，但將它們包括在內以確認它們所扮演的角色及其在該過程中的重要性：
vendor/laravel/framework/src/Illuminate/Auth/AuthManager.php - 主要授權工廠經理
Auth() facade - 默認情況下返回收縮包裝的 Illuminate\Auth\SessionGuard 類實例，除非通過 config/auth.php 文件指示它做其他事情 - Auth() 在整個 Laravel 代碼中普遍使用來檢索會話守衛
代碼
應用程序/Http/Controllers/HomeController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
/**
* Handles and manages the home-page
*
* @category controllers
*/
class HomeController extends Controller
{
/**
* Create a new controller instance.
*
* @return void
*/
public function __construct()
{
$this->middleware('auth');
}
public function index()
{
blah
}
... other methods ...
}
應用程序/提供者/ApiUserProvider.php
資料來源：
<?php
namespace App\Providers;
use Illuminate\Contracts\Auth\UserProvider;
use Illuminate\Contracts\Auth\Authenticatable as UserContract;
use App\ApiUser;
/**
* Delegates API user login and authentication
*
* @category providers
*/
class ApiUserProvider implements UserProvider
{
/**
* Custom API Handler
* Used to request API and capture responses
*
* @var \Path\To\Your\Internal\Api\Handler
*/
private $_oApi = null;
/**
* POST request to API
*
* @param string $p_url Endpoint URL
* @param array $p_arrParam Parameters
* @param boolean $p_isOAuth2 Is OAuth2 authenticated request? [Optional, Default=True]
*
* @return array
*/
private function _post(string $p_url, array $p_arrParam, bool $p_isOAuth2=true)
{
if (!$this->_oApi) {
$this->_oApi = new \Path\To\Your\Internal\Api\Handler();
}
$arrResponse = $this->_oApi->post($p_url, $p_arrParam, $p_isOAuth2);
return $arrResponse;
}
/**
* GET request to API
*
* @param string $p_url Endpoint URL
* @param array $p_arrParam Parameters [Optional, Default = array()]
*
* @return array
*/
private function _get(string $p_url, array $p_arrParam=[], bool $p_isOAuth2=true)
{
if (!$this->_oApi) {
$this->_oApi = new \Path\To\Your\Internal\Api\Handler();
}
$arrResponse = $this->_oApi->get($p_url, $p_arrParam);
return $arrResponse;
}
/**
* Retrieve a user by the given credentials.
*
* @param array $p_arrCredentials
*
* @return \Illuminate\Contracts\Auth\Authenticatable|null
*/
public function retrieveByCredentials(array $p_arrCredentials)
{
$arrResponse = $this->_post('/login', $p_arrCredentials, false);
if ( $arrResponse['result'] ) {
$arrPayload = array_merge(
$arrResponse['data'],
$p_arrCredentials
);
return $this->getApiUser($arrPayload);
}
}
/**
* Retrieve a user by their unique identifier.
*
* @param mixed $p_id
*
* @return \Illuminate\Contracts\Auth\Authenticatable|null
*/
public function retrieveById($p_id)
{
$arrResponse = $this->_get("user/id/{$p_id}");
if ( $arrResponse['result'] ) {
return $this->getApiUser($arrResponse['data']);
}
}
/**
* Validate a user against the given credentials.
*
* @param \Illuminate\Contracts\Auth\Authenticatable $p_oUser
* @param array $p_arrCredentials
*
* @return bool
*/
public function validateCredentials(UserContract $p_oUser, array $p_arrCredentials)
{
return $p_oUser->getAuthPassword() == $p_arrCredentials['password'];
}
/**
* Get the api user.
*
* @param mixed $p_user
*
* @return \App\Auth\ApiUser|null
*/
protected function getApiUser($p_user)
{
if ($p_user !== null) {
return new ApiUser($p_user);
}
return null;
}
protected function getUserById($id)
{
$user = [];
foreach ($this->getUsers() as $item) {
if ($item['account_id'] == $id) {
$user = $item;
break;
}
}
return $user ?: null;
}
protected function getUserByUsername($username)
{
$user = [];
foreach ($this->getUsers() as $item) {
if ($item['email_address'] == $username) {
$user = $item;
break;
}
}
return $user ?: null;
}
/**
* The methods below need to be defined because of the Authenticatable contract
* but need no implementation for 'Auth::attempt' to work and can be implemented
* if you need their functionality
*/
public function retrieveByToken($identifier, $token) { }
public function updateRememberToken(UserContract $user, $token) { }
}
應用程序/CoreExtensions/SessionGuardExtended.php
資料來源：
<?php
namespace App\CoreExtensions;
use Illuminate\Auth\SessionGuard;
use Illuminate\Contracts\Auth\Authenticatable;
/**
* Extended SessionGuard() functionality
* Provides added functionality to store the OAuth tokens in the session for later use
*
* @category guards
*
* @see https://stackoverflow.com/questions/36087061/extending-laravel-5-2-sessionguard
*/
class SessionGuardExtended extends SessionGuard
{
/**
* Log a user into the application.
*
* @param \Illuminate\Contracts\Auth\Authenticatable $p_oUser
* @param bool $p_remember
* @return void
*/
public function login(Authenticatable $p_oUser, $p_remember = false)
{
parent::login($p_oUser, $p_remember);
/**
* Writing the OAuth tokens to the session
*/
$key = 'authtokens';
$this->session->put(
$key,
[
'access_token' => $p_oUser->getAccessToken(),
'refresh_token' => $p_oUser->getRefreshToken(),
]
);
}
/**
* Log the user out of the application.
*
* @return void
*/
public function logout()
{
parent::logout();
/**
* Deleting the OAuth tokens from the session
*/
$this->session->forget('authtokens');
}
}
應用程序/ApiUser
資料來源：
使用外部 JSON API 的 Laravel 5.8 身份驗證（創建自己的服務提供者） * https://laracasts.com/discuss/channels/laravel/replacing-the-laravel-authentication-with-a-custom-authentication
<?php
namespace App;
use Illuminate\Auth\GenericUser;
use Illuminate\Contracts\Auth\Authenticatable as UserContract;
class ApiUser extends GenericUser implements UserContract
{
/**
* Returns the OAuth access_token
*
* @return mixed
*/
public function getAccessToken()
{
return $this->attributes['access_token'];
}
public function getRefreshToken()
{
return $this->attributes['refresh_token'];
}
}
應用程序/提供商/AuthServiceProvider.php
<?php
namespace App\Providers;
use Illuminate\Support\Facades\Auth;
use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
class AuthServiceProvider extends ServiceProvider
{
/**
* Register any authentication / authorization services.
*
* @return void
*/
public function boot()
{
$this->registerPolicies();
Auth::provider('frank_sinatra', function ($app, array $config) {
// Return an instance of Illuminate\Contracts\Auth\UserProvider...
return new ApiUserProvider();
});
}
}
應用程序/提供者/AppServiceProvider.php
資料來源：
筆記：
關于此 PHP 文件中編碼的更改，存在一些細微的問題。如果您想了解更多，請查看 vendor/laravel/framework/src/Illuminate/Auth/AuthManager.php，尤其是 AuthManager::resolve()。
對 config/auth.php 'session' 和 'token' 的引用由硬編碼方法 AuthManager::createSessionDriver() 和 AuthManager::createTokenDriver() 提供（如果您知道擴展 AuthManager.php 的方法請告訴我應用程序）
AppServiceProvider.php 來拯救！可以在 AppServiceProvider::boot() 中注冊自定義守衛，并在執行默認代碼之前攔截。
我同意上面的第 2 點，但我們不能做一些聰明的事情，比如從 AppServiceProvider 返回自定義會話保護名稱或實例，在 AuthManager 的專用公共方法中設置 setCookieJar()、setDispatcher()、setRequest()。 php，它可以掛接到 AppServiceProvider.php 或由 config/auth.php 驅動在 AuthManager.php 中創建自定義會話保護后執行？
如果沒有 cookie 或會話，則不會通過重定向保留用戶的身份。解決此問題的唯一方法是在我們當前的解決方案中的 AppServiceProvider 中包含 setCookieJar()、setDispatcher() 和 setRequest()。
<?php
namespace App\Providers;
use Illuminate\Support\ServiceProvider;
use Illuminate\Support\Facades\Auth;
use App\CoreExtensions\SessionGuardExtended;
class AppServiceProvider extends ServiceProvider
{
/**
* Register any application services.
*
* @return void
*/
public function register()
{
//
}
/**
* Bootstrap any application services.
*
* @see https://stackoverflow.com/questions/36087061/extending-laravel-5-2-sessionguard
*
* @return void
*/
public function boot()
{
/**
* Extending Illuminate\Auth\SessionGuard()
* This is so we can store the OAuth tokens in the session
*/
Auth::extend(
'sessionExtended',
function ($app) {
$guard = new SessionGuardExtended(
'sessionExtended',
new ApiUserProvider(),
app()->make('session.store'),
request()
);
// When using the remember me functionality of the authentication services we
// will need to be set the encryption instance of the guard, which allows
// secure, encrypted cookie values to get generated for those cookies.
if (method_exists($guard, 'setCookieJar')) {
$guard->setCookieJar($this->app['cookie']);
}
if (method_exists($guard, 'setDispatcher')) {
$guard->setDispatcher($this->app['events']);
}
if (method_exists($guard, 'setRequest')) {
$guard->setRequest($this->app->refresh('request', $guard, 'setRequest'));
}
return $guard;
}
);
}
}
配置/auth.php
資料來源：
<?php
return [
/*
|--------------------------------------------------------------------------
| Authentication Defaults
|--------------------------------------------------------------------------
|
| This option controls the default authentication "guard" and password
| reset options for your application. You may change these defaults
| as required, but they're a perfect start for most applications.
|
*/
'defaults' => [
//'guard' => 'web', /** This refers to the settings under ['guards']['web'] */
'guard' => 'webextended', /** This refers to the settings under ['guards']['webextended'] */
'passwords' => 'users', /** This refers to the settings under ['passwords']['users'] */
],
/*
|--------------------------------------------------------------------------
| Authentication Guards
|--------------------------------------------------------------------------
|
| Next, you may define every authentication guard for your application.
| Of course, a great default configuration has been defined for you
| here which uses session storage and the Eloquent user provider.
|
| All authentication drivers have a user provider. This defines how the
| users are actually retrieved out of your database or other storage
| mechanisms used by this application to persist your user's data.
|
| Supported: "session", "token"
|
*/
'guards' => [
'web' => [
'driver' => 'session', /** This refers to Illuminate/Auth/SessionGuard */
'provider' => 'users', /** This refers to the settings under ['providers']['users'] */
],
'webextended' => [
'driver' => 'sessionExtended', /** @see app/Providers/AppServiceProvider::boot() */
'provider' => 'users', /** This refers to the settings under ['providers']['users'] */
],
'api' => [
'driver' => 'token', /** This refers to Illuminate/Auth/TokenGuard */
'provider' => 'users',
'hash' => false,
],
],
/*
|--------------------------------------------------------------------------
| User Providers
|--------------------------------------------------------------------------
|
| All authentication drivers have a user provider. This defines how the
| users are actually retrieved out of your database or other storage
| mechanisms used by this application to persist your user's data.
|
| If you have multiple user tables or models you may configure multiple
| sources which represent each model / table. These sources may then
| be assigned to any extra authentication guards you have defined.
|
| Supported: "database", "eloquent"
|
*/
'providers' => [
'users' => [
'driver' => 'frank_sinatra', /** @see app/Providers/AuthServiceProvider::boot() */
//'model' => App\User::class,
],
// 'users' => [
// 'driver' => 'database',
// 'table' => 'users',
// ],
],
[
blah
],
[
other settings
],
];
如何使用此解決方案
很簡單。總體方法沒有變化。換句話說，我們使用 Auth() 門面。
使用自定義 API 登錄時/login?username=<username>&password=<password>
request()->flash();
$arrData = request()->all();
if ( Auth::attempt($arrData, true) ) {
return redirect('home');
} else {
return back()->withErrors(
[
'username' => "Those credentials can't be found",
'password' => "Those credentials can't be found",
]
);
}
使用自定義 API 注銷時/logout
Auth::logout();
return redirect('home');
- 1 回答
- 0 關注
- 204 瀏覽
添加回答
舉報
0/150
提交
取消