laravel5.5 + jwt-auth 1.0.0-rc.2 多表多种用户认证规式

摘要：在下新建无效无效然后在的下添加自定义的跨域中间键在路由和下的构造函数调用。免责由于时间关系，没有在截图了，参考此文章的小伙伴自行进行测试下面例子源用了很多文档代码

composer create-project --prefer-dist laravel/laravel sample "5.5.*"

composer install

composer require tymon/jwt-auth

or
在composer.json中添加 `"tymon/jwt-auth": "^1.0.0-rc.2",`
终端：composer update

在config/app.php的providers中

"providers" => [

    ...

    TymonJWTAuthProvidersLaravelServiceProvider::class,
]

终端运行：php artisan vendor:publish --provider="TymonJWTAuthProvidersLaravelServiceProvider"会产生config/jwt.php的配置文件

再运行：php artisan jwt:secret生成key

运行：

php artisan make:model Models/Admin -m
php artisan make:model Models/User -m

database/migrations下
迁移文件中

    **admins:**
Schema::create("admins", function (Blueprint $table) {
    $table->increments("id");
    $table->string("name");
    $table->string("email")->unique();
    $table->string("password");
    $table->string("avatar")->nullable();
    $table->timestamps();
});
    **users:**
Schema::create("users", function (Blueprint $table) {
    $table->increments("id");
    $table->string("name");
    $table->string("email")->unique();
    $table->string("password");
    $table->string("avatar")->nullable();
    $table->timestamps();
});

getKey();
    }

    /**
     * Return a key value array, containing any custom claims to be added to the JWT.
     *
     * @return array
     */
    public function getJWTCustomClaims()
    {
        return [];
    }
}

在config/auth.php中配置，找到对应的修改成自己的

"guards" => [

"web" => [
    "driver" => "session",
    "provider" => "users",
],

"api" => [
    "driver" => "jwt",
    "provider" => "users",
],

"admin" => [
    "driver" => "jwt",
    "provider" => "admins",
],

],

"providers" => [

"users" => [
    "driver" => "eloquent",
    "model" => AppModelsUser::class,
    "table" => "users",
],

"admins" => [
    "driver" => "eloquent",
    "model" => AppModelsAdmin::class,
    "table" => "admin_users"
],

],

在routes/api.php
Route::group([

"middleware" => "api",
"prefix" => "auth"

], function ($router) {

Route::post("login", "AuthController@login");
Route::post("logout", "AuthController@logout");
Route::post("refresh", "AuthController@refresh");
Route::post("me", "AuthController@me");

});

运行：php artisan make:controller AdminController创建控制器
注：此处主要是用了guard("admin")来区分要调用的表和Model这里是在auth.php中配置的

middleware("myauth", ["except" => ["login"]]);
    }

    /**
     * Get a JWT via given credentials.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function login()
    {
        $credentials = request(["email", "password"]);

        if (! $token = auth()->guard("admin")->attempt($credentials)) {
            return response()->json(["error" => "Unauthorized"], 401);
        }

        return $this->respondWithToken($token);
    }

    /**
     * Get the authenticated User.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function me()
    {
        return response()->guard("admin")->json(auth()->user());
    }

    /**
     * Log the user out (Invalidate the token).
     *
     * @return IlluminateHttpJsonResponse
     */
    public function logout()
    {
        auth()->guard("admin")->logout();

        return response()->json(["message" => "Successfully logged out"]);
    }

    /**
     * Refresh a token.
     *
     * @return IlluminateHttpJsonResponse
     */
    public function refresh()
    {
        return $this->respondWithToken(auth()->guard("admin")->refresh());
    }

    /**
     * Get the token array structure.
     *
     * @param  string $token
     *
     * @return IlluminateHttpJsonResponse
     */
    protected function respondWithToken($token)
    {
        return response()->json([
            "access_token" => $token,
            "token_type" => "bearer",
            "expires_in" => auth()->factory()->getTTL() * 60
        ]);
    }
}

由于使用了多表认证，所以不能使用jwt自带的中间键auth:api or jwt.auth，我自己建了一个中间键[myauth]来做路由验证。
在app/Http/Middleware下新建

namespace AppHttpMiddleware;

use Closure;
use IlluminateSupportFacadesAuth;

class AuthMiddleware {
    public function handle($request, Closure $next)
    {

        try {
            $user = auth()->guard("admin")->userOrFail();
            if(!$user) {
                return response()->json(["message" => "jwt 无效"], 401);
            }
        } catch (TymonJWTAuthExceptionsUserNotDefinedException $e) {
            return response()->json(["message" => "jwt 无效"], 401);
        }
        return $next($request);
    }
}

然后在app/Http/Kernel的$routeMiddleware下添加
protected $routeMiddleware = [

    ...

    "cors" => AppHttpMiddlewareClientRequestCors::class, //自定义的跨域中间键
    "myauth" => AppHttpMiddlewareAuthMiddleware::class,

    ...

];

在路由和Controller下的构造函数调用。

由于时间关系，没有在PostMan截图了，参考此文章的小伙伴自行进行测试
下面例子源用了很多jwt-auth文档代码