add jwt quickstart

Author: Connor Leech

.env.example

@@ -5,6 +5,8 @@ APP_DEBUG=true
 APP_LOG_LEVEL=debug
 APP_URL=http://localhost
 
+JWT_SECRET=XXXXXXXXXXXX
+
 DB_CONNECTION=mysql
 DB_HOST=127.0.0.1
 DB_PORT=3306

app/Http/Controllers/AuthController.php

@@ -0,0 +1,83 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Support\Facades\Auth;
+use App\Http\Controllers\Controller;
+
+class AuthController extends Controller
+{
+ /**
+ * Create a new AuthController instance.
+ *
+ * @return void
+ */
+ public function __construct()
+ {
+ $this->middleware('auth:api', ['except' => ['login']]);
+ }
+
+ /**
+ * Get a JWT via given credentials.
+ *
+ * @return \Illuminate\Http\JsonResponse
+ */
+ public function login()
+ {
+ $credentials = request(['email', 'password']);
+
+ if (! $token = auth()->attempt($credentials)) {
+ return response()->json(['error' => 'Unauthorized'], 401);
+ }
+
+ return $this->respondWithToken($token);
+ }
+
+ /**
+ * Get the authenticated User.
+ *
+ * @return \Illuminate\Http\JsonResponse
+ */
+ public function me()
+ {
+ return response()->json(auth()->user());
+ }
+
+ /**
+ * Log the user out (Invalidate the token).
+ *
+ * @return \Illuminate\Http\JsonResponse
+ */
+ public function logout()
+ {
+ auth()->logout();
+
+ return response()->json(['message' => 'Successfully logged out']);
+ }
+
+ /**
+ * Refresh a token.
+ *
+ * @return \Illuminate\Http\JsonResponse
+ */
+ public function refresh()
+ {
+ return $this->respondWithToken(auth()->refresh());
+ }
+
+ /**
+ * Get the token array structure.
+ *
+ * @param string $token
+ *
+ * @return \Illuminate\Http\JsonResponse
+ */
+ protected function respondWithToken($token)
+ {
+ return response()->json([
+ 'access_token' => $token,
+ 'token_type' => 'bearer',
+ 'expires_in' => auth()->factory()->getTTL() * 60
+ ]);
+ }
+}

app/User.php

@@ -3,9 +3,10 @@
 namespace App;
 
 use Illuminate\Notifications\Notifiable;
+use Tymon\JWTAuth\Contracts\JWTSubject;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 
-class User extends Authenticatable
+class User extends Authenticatable implements JWTSubject
 {
  use Notifiable;
 
@@ -27,10 +28,23 @@ class User extends Authenticatable
  'password', 'remember_token',
  ];
 
- public function generateToken()
+ /**
+ * Get the identifier that will be stored in the subject claim of the JWT.
+ *
+ * @return mixed
+ */
+ public function getJWTIdentifier()
+ {
+ return $this->getKey();
+ }
+
+ /**
+ * Return a key value array, containing any custom claims to be added to the JWT.
+ *
+ * @return array
+ */
+ public function getJWTCustomClaims()
  {
- $this->api_token = str_random(60);
- $this->save();
- return $this->api_token;
+ return [];
  }
 }

composer.json

@@ -8,7 +8,8 @@
  "php": ">=7.0.0",
  "fideloper/proxy": "~3.3",
  "laravel/framework": "5.5.*",
- "laravel/tinker": "~1.0"
+ "laravel/tinker": "~1.0",
+ "tymon/jwt-auth": "1.0.0-rc.1"
  },
  "require-dev": {
  "filp/whoops": "~2.0",