Laravel 5.6 - 用于自消费 API 的 Passport JWT httponly cookie SPA 身份验证

使用Laravel 5.6进行自消费API的身份验证是一项非常重要的任务。在本文中，我们将介绍如何使用Passport JWT httponly cookie SPA身份验证来实现这一目标。我们将深入了解Passport和JWT，以及如何将它们与Laravel一起使用。此外，我们还将提供一个案例代码，以帮助您更好地理解如何实现这一身份验证机制。

composer require laravel/passport

php artisan vendor:publish --provider="Laravel\Passport\PassportServiceProvider"
php artisan migrate

php artisan passport:install

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],
    'api' => [
        'driver' => 'passport',
        'provider' => 'users',
    ],
],

php
Route::middleware('auth:api')->get('/user', function (Request $request) {
    return $request->user();
});

php artisan make:controller AuthController

php
use Illuminate\Support\Facades\Auth;
class AuthController extends Controller
{
    public function login(Request $request)
    {
        $credentials = $request->only(['email', 'password']);
        if (Auth::attempt($credentials)) {
            $user = Auth::user();
            $token = $user->createToken('MyApp')->accessToken;
            return response()->json([
                'token' => $token,
                'user' => $user
            ]);
        }
        return response()->json(['error' => 'Unauthorized'], 401);
    }
}

php
Route::post('login', 'AuthController@login');