desmart/jwt-auth

Simple JWT auth implementation for Laravel.

Laravel JWT Auth

Simple JWT auth implementation for Laravel., _(*1)

Installation

Install package using Composer:, _(*2)

composer require desmart/jwt-auth

Register the package's service provider in config/app.php:, _(*3)

'providers' => [
        (...)
        DeSmart\JWTAuth\ServiceProvider::class,
    ],

Configuration

The package comes with a config file. In order to publish it, run the following command:, _(*4)

php artisan vendor:publish

The config file allows you to change some options. Be sure to check it out., _(*5)

Usage

The package allows to: 1. Authenticate a user, 2. Verify if the user is authenticated using route middleware., _(*6)

User authentication

First, add the TokenRefreshMiddleware as a global middleware or to a middleware group (app/Http/Kernel.php). It will add the Authorization header to the response. This header will contain the JWT token, after successful authentication., _(*7)

Then, inject \DeSmart\JWTAuth\Auth\Guard into your auth class and authenticate the user (credentials validation is up to you)., _(*8)

public function authenticateUser(\DeSmart\JWTAuth\Auth\Guard $auth, $user) {
    if (true === $this->validateCredentails($user)) {
        $auth->loginUser($user);
    }
}

Token verification

Once a user has been authenticated, each request to your application should contain the Authorization header with the token obtained after succesful authentication., _(*9)

Add AuthMiddleware to the your $routeMiddleware array (app/Http/Kernel.php):, _(*10)

protected $routeMiddleware = [
        (...)
        'auth' => \DeSmart\JWTAuth\Middleware\AuthMiddleware::class,
    ];

Now, simply use the auth route middleware to check if a user is authenticated., _(*11)