middleware('auth:api', ['except' => ['login']]); // 另外关于上面的中间件,官方文档写的是『auth:api』 // 但是我推荐用 『jwt.auth』,效果是一样的,但是有更加丰富的报错信息返回 } // api 登录 public function login(AuthorizationRequest $request) { $credentials = [ 'email' => $request->email, 'password' => $request->password, ]; if (! $token = Auth::guard('api')->attempt($credentials)) { // return response()->json(['error' => 'Unauthorized'], 401); return $this->errorUnauthorized('用户名或密码错误'); } return $this->respondWithToken($token); } /** * Get the authenticated User. * * @return \Illuminate\Http\JsonResponse */ public function me() { return response()->json(auth('api')->user()); } // 删除 token public function logout() { Auth::guard('api')->logout(); // return $this->noContent(); return response()->json(['message' => 'Successfully logged out']); } /** * Refresh a token. * 刷新token,如果开启黑名单,以前的token便会失效。 * 值得注意的是用上面的getToken再获取一次Token并不算做刷新,两次获得的Token是并行的,即两个都可用。 * @return \Illuminate\Http\JsonResponse */ public function refresh() { $token = Auth::guard('api')->refresh(); return $this->respondWithToken($token); } // 响应 token protected function respondWithToken($token) { return response([ 'access_token' => $token, 'token_type' => 'Bearer', 'expires_in' => Auth::guard('api')->factory()->getTTL() * 60 ], 201); } }