Angular是一个用于构建Web应用程序的开源JavaScript框架,而Laravel是一个用于构建Web应用程序的开源PHP框架。JWT(JSON Web Token)是一种用于认证和授权的开放标准。
要实现Angular和Laravel之间的JWT身份验证,可以按照以下步骤进行操作:
tymon/jwt-auth
库,该库提供了JWT身份验证功能。可以使用Composer运行以下命令进行安装:composer require tymon/jwt-auth
config/app.php
文件中,注册JWT服务提供者和中间件。将以下代码添加到providers
数组中:Tymon\JWTAuth\Providers\LaravelServiceProvider::class,
将以下代码添加到aliases
数组中:
'JWTAuth' => Tymon\JWTAuth\Facades\JWTAuth::class,
'JWTFactory' => Tymon\JWTAuth\Facades\JWTFactory::class,
php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\LaravelServiceProvider"
生成的配置文件将位于config/jwt.php
。
User
),并使用jwt-auth
库提供的HasApiTokens
trait来为用户模型添加JWT身份验证功能。例如:use Tymon\JWTAuth\Contracts\JWTSubject;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Tymon\JWTAuth\Contracts\JWTSubject;
class User extends Authenticatable implements JWTSubject
{
use Notifiable, \Tymon\JWTAuth\Contracts\JWTSubject;
// ...
public function getJWTIdentifier()
{
return $this->getKey();
}
public function getJWTCustomClaims()
{
return [];
}
}
config/auth.php
文件中,将默认的用户提供者更改为JWT用户提供者。将以下代码添加到providers
数组中:'users' => [
'driver' => 'jwt',
'provider' => 'users',
],
routes/api.php
文件中,创建用于处理用户身份验证的路由。例如:Route::post('login', 'AuthController@login');
Route::post('register', 'AuthController@register');
在AuthController
控制器中,您可以使用jwt-auth
库来处理登录和注册请求,并生成并返回JWT令牌。例如:
use Illuminate\Support\Facades\Auth;
use Illuminate\Http\Request;
class AuthController extends Controller
{
public function login(Request $request)
{
$credentials = $request->only('email', 'password');
if (!$token = Auth::attempt($credentials)) {
return response()->json(['error' => 'Unauthorized'], 401);
}
return $this->respondWithToken($token);
}
public function register(Request $request)
{
// 处理注册逻辑
$token = Auth::attempt($request->only('email', 'password'));
return $this->respondWithToken($token);
}
protected function respondWithToken($token)
{
return response()->json([
'access_token' => $token,
'token_type' => 'bearer',
'expires_in' => Auth::factory()->getTTL() * 60
]);
}
}
HttpClient
模块来发送登录和注册请求,并在成功时保存JWT令牌。例如:import { HttpClient } from '@angular/common/http';
export class AuthService {
private apiUrl = 'http://laravel-api.com/api';
constructor(private http: HttpClient) {}
login(email: string, password: string) {
return this.http.post(`${this.apiUrl}/login`, { email, password });
}
register(email: string, password: string) {
return this.http.post(`${this.apiUrl}/register`, { email, password });
}
}
@auth0/angular-jwt
库来解码和验证JWT令牌。