Projeto - Primeiras Autenticações

Author: NiltonMorais

.env.example

@@ -32,4 +32,6 @@ PUSHER_KEY=
 PUSHER_SECRET=
 
 URL_ADMIN_LOGIN=/admin/login
-URL_ADMIN_LOGOUT=/admin/logout
+URL_ADMIN_LOGOUT=/admin/logout
+
+JWT_SECRET=

app/Http/Controllers/Api/AuthController.php

@@ -0,0 +1,80 @@
+<?php
+
+namespace CodeFin\Http\Controllers\Api;
+
+use CodeFin\Http\Controllers\Controller;
+use Illuminate\Foundation\Auth\AuthenticatesUsers;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Lang;
+
+class AuthController extends Controller
+{
+    use AuthenticatesUsers;
+
+    public function accessToken(Request $request)
+    {
+        $this->validateLogin($request);
+
+        if ($this->hasTooManyLoginAttempts($request)) {
+            $this->fireLockoutEvent($request);
+
+            return $this->sendLockoutResponse($request);
+        }
+
+        $credentials = $this->credentials($request);
+
+        if($token = Auth::guard('api')->attempt($credentials)){
+            return $this->sendLoginResponse($request,$token);
+        }
+
+        $this->incrementLoginAttempts($request);
+
+        return $this->sendFailedLoginResponse($request);
+    }
+
+    public function refreshToken(Request $request)
+    {
+        $token = Auth::guard('api')->refresh();
+        return $this->sendLoginResponse($request,$token);
+    }
+
+    protected function sendLoginResponse(Request $request, $token)
+    {
+        $this->clearLoginAttempts($request);
+
+        return response()->json([
+           'token' => $token
+        ]);
+    }
+
+    protected function sendLockoutResponse(Request $request)
+    {
+        $seconds = $this->limiter()->availableIn(
+            $this->throttleKey($request)
+        );
+
+        $message = Lang::get('auth.throttle', ['seconds' => $seconds]);
+
+        return response()->json([
+            'message' => $message
+        ],403);
+    }
+
+    public function sendFailedLoginResponse(Request $request)
+    {
+        return response()->json([
+            'message' => Lang::get('auth.failed')
+        ],401);
+    }
+
+    public function logout()
+    {
+        Auth::guard('api')->logout();
+
+        return response()->json([],204);
+    }
+
+
+
+}

app/Jwt/Manager.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace CodeFin\Jwt;
+
+use \Tymon\JWTAuth\Manager as JwtManager;
+use Tymon\JWTAuth\Token;
+
+class Manager extends JwtManager{
+
+    public function refresh(Token $token, $forceForever = false, $resetClaims = false)
+    {
+        $this->setRefreshFlow();
+        return parent::refresh($token, $forceForever, $resetClaims);
+    }
+}

app/Providers/AppServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace CodeFin\Providers;
 
+use CodeFin\Jwt\Manager;
 use Illuminate\Support\ServiceProvider;
 
 class AppServiceProvider extends ServiceProvider
@@ -23,6 +24,15 @@ public function boot()
      */
     public function register()
     {
-        //
+        $this->app->singleton('tymon.jwt.manager', function ($app) {
+            $instance = new Manager(
+                $app['tymon.jwt.provider.jwt'],
+                $app['tymon.jwt.blacklist'],
+                $app['tymon.jwt.payload.factory']
+            );
+
+            return $instance->setBlacklistEnabled((bool) config('jwt.blacklist_enabled'))
+                ->setPersistentClaims(config('jwt.persistent_claims'));
+        });
     }
 }

app/User.php

@@ -4,8 +4,9 @@
 
 use Illuminate\Notifications\Notifiable;
 use Illuminate\Foundation\Auth\User as Authenticatable;
+use Tymon\JWTAuth\Contracts\JWTSubject;
 
-class User extends Authenticatable
+class User extends Authenticatable implements JWTSubject
 {
     use Notifiable;
     const ROLE_ADMIN = "admin";
@@ -26,4 +27,30 @@ class User extends Authenticatable
     protected $hidden = [
         'password', 'remember_token',
     ];
+
+    /**
+     * Get the identifier that will be stored in the subject claim of the JWT.
+     *
+     * @return mixed
+     */
+    public function getJWTIdentifier()
+    {
+        return $this->id;
+    }
+
+    /**
+     * Return a key value array, containing any custom claims to be added to the JWT.
+     *
+     * @return array
+     */
+    public function getJWTCustomClaims()
+    {
+        return [
+            'user'=>[
+                'id'=> $this->id,
+                'name'=> $this->name,
+                'email'=> $this->email,
+            ]
+        ];
+    }
 }

composer.lock

@@ -166,7 +166,7 @@
         /*
          * Package Service Providers...
          */
-
+        Tymon\JWTAuth\Providers\LaravelServiceProvider::class,
         //
 
         /*

config/app.php

@@ -42,7 +42,7 @@
         ],
 
         'api' => [
-            'driver' => 'token',
+            'driver' => 'jwt',
             'provider' => 'users',
         ],
     ],