tp6token进行合法性验证（中间件）

ds 文档中心 2022-05-24 18:41:08 47

composer require   lcobucci/jwtcomposer require lcobucci/jwt=3.3.3

<?phpreturn ['ALI_APPID'=>'','ALI_APPSECRET'=>'','ALI_SNAME'=>'','ALI_TCODE'=>'','API_KEY' =>'','API_HOST'=>'http://www.lampol.vip'];

下面的是中间件内：

<?phpdeclare (strict_types = 1);namespace app\middleware;use Lcobucci\JWT\Parser;use Lcobucci\JWT\ValidationData;use Lcobucci\JWT\Signer\Hmac\Sha256;class Api{    /**     * 处理请求     *     * @param \think\Request $request     * @param \Closure$next     * @return Response     */    public function handle($request, \Closure $next)    { $header = $request->header();if(!isset($header['token'])){//没有token的话，进行if里面return json(['code'=>440,'msg'=>'request must with token']);}$token = $header['token'];try{$token = (new Parser())->parse($token);//token解析,解析成一个对象(切记，如果用户随意改的token会进入catch里面)}catch(\Exception $e){return json(['code'=>440,'msg'=>'invalid token']);}$signer = new Sha256();//verify进行合法性验证if(!$token->verify($signer,config('shop.API_KEY'))){ return json(['code'=>440,'msg'=>'token verify failed']);}$data = new ValidationData();//验证token是否在有效期内if(!$token->validate($data)){$mobile = $token->getClaim('mobile');$token = getToken($mobile);return json(['code'=>450,'msg'=>'token expired','token'=>$token]);}return $next($request);    }}

tp6token进行合法性验证（中间件）

标签