laravel使用 Passport 服务做 API 认证

1、首先安装，我们需要在项目中运行以下命令安装 laravel 的 Passport 软件包

composer require laravel/passport

2、安装成功之后，我们需要设置他们的服务提供者，所以打开 config/app.php 文件，并在providers中添加以下代码

Laravel\Passport\PassportServiceProvider::class, 

注： laravel5.5 以上版本可以忽略这一步骤，此步骤针对 5.5 以下版本

3、注册之后，迁移数据表，Passport 会生成用于存储客户端和令牌的数据表

php artisan migrate

接下来我们安装 Passport 以生成令牌和客户端

php artisan passport:install

4、完成上面步骤，我们来配置下 Passport

• 打开 模型 app/User.php 我们需要增加 HasApiTokens
• 打开 app/Providers/AuthServiceProvider.php 中增加 Passport::routers()
• 在 config/auth.php 中，更改 api 认证方式为 password

修改app/User.php如下：

<?php

namespace App;

use Illuminate\Notifications\Notifiable;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Laravel\Passport\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, Notifiable;

    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'name', 'email', 'password',
    ];

    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password', 'remember_token',
    ];
}

修改app/Providers/AuthServiceProvider.php如下：

<?php

namespace App\Providers;

use Illuminate\Support\Facades\Gate;
use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Laravel\Passport\Passport;
use Laravel\Passport\RouteRegistrar;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array
     */
    protected $policies = [
        'App\Model' => 'App\Policies\ModelPolicy',
    ];

    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        Passport::routes();
    }
}

修改config/auth.php如下：

return [
    .....
    .....
    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],
        'api' => [
            'driver' => 'passport',
            'provider' => 'users',
        ],
    ],
    .....
    .....
]

5、配置 routes/api.php 增加相应路由令牌

//登录获取token接口
Route::post('login', 'API\PassportController@login');
//注册用户
Route::post('register', 'API\PassportController@register');

//路由组内的路由需要验证token
Route::group(['middleware' => 'auth:api'], function(){
    Route::post('get-details', 'API\PassportController@getDetails');
});

6、接下来创建控制器

使用命令创建：

 php artisan make:controller API/PassportController

文件内容修改为如下内容：

<?php
namespace App\Http\Controllers\API;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use App\User;
use Illuminate\Support\Facades\Auth;
use Validator;

class PassportController extends Controller
{

    public $successStatus = 200;

    /**
     * login api
     *
     * @return \Illuminate\Http\Response
     */
    public function login(){
        if(Auth::attempt(['email' => request('email'), 'password' => request('password')])){
            $user = Auth::user();
            $success['token'] =  $user->createToken('MyApp')->accessToken;
            return response()->json(['success' => $success], $this->successStatus);
        }
        else{
            return response()->json(['error'=>'Unauthorised'], 401);
        }
    }

    /**
     * Register api
     *
     * @return \Illuminate\Http\Response
     */
    public function register(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'name' => 'required',
            'email' => 'required|email',
            'password' => 'required',
            'c_password' => 'required|same:password',
        ]);

        if ($validator->fails()) {
            return response()->json(['error'=>$validator->errors()], 401);            
        }

        $input = $request->all();
        $input['password'] = bcrypt($input['password']);
        $user = User::create($input);
        $success['token'] =  $user->createToken('MyApp')->accessToken;
        $success['name'] =  $user->name;

        return response()->json(['success'=>$success], $this->successStatus);
    }

    /**
     * details api
     *
     * @return \Illuminate\Http\Response
     */
    public function getDetails()
    {
        $user = Auth::user();
        return response()->json(['success' => $user], $this->successStatus);
    }
}

到此所有代码编写完成，接下来使用postman来测试一下使用效果即可