由用户会话验证的Laravel API路由

Question

我已经开始研究现有的Laravel 5.2项目了。我需要为应用程序的前端构建一些基本的API请求来与数据库通信。这些路由需要由用户的会话进行身份验证。

我尝试使用auth：api驱动程序设置中间件，并在../config/auth.php中将api ['driver']设置为'session'。但是，即使用户使用所有权限和角色进行身份验证，我仍然会将302重定向到登录页面。

有人可以推荐一些关于如何基于用户会话实现API身份验证的阅读或其他解决方案的想法吗？

来自routes / api.php：

Route::group(["middleware" => ["auth:api"]], function () {
    // results in 302 redirect to /login
    Route::get('test', function(){
        return "TEST";
    });    

});

来自config / auth.php

'guards' => [
'web' => [
    'driver' => 'session',
    'provider' => 'users',
],

'api' => [
    'driver' => 'session',
    'provider' => 'users',
],

应用程序/ HTTP / Kernel.php

<?php

namespace AppHttp;

use IlluminateFoundationHttpKernel as HttpKernel;

class Kernel extends HttpKernel
{
    /**
     * The application's global HTTP middleware stack.
     *
     * These middleware are run during every request to your application.
     *
     * @var array
     */
    protected $middleware = [
        IlluminateFoundationHttpMiddlewareCheckForMaintenanceMode::class,
        AppHttpMiddlewareNoCache::class,
    ];

    /**
     * The application's route middleware groups.
     *
     * @var array
     */
    protected $middlewareGroups = [
        'web' => [
            AppHttpMiddlewareEncryptCookies::class,
            IlluminateCookieMiddlewareAddQueuedCookiesToResponse::class,
            IlluminateSessionMiddlewareStartSession::class,
            IlluminateViewMiddlewareShareErrorsFromSession::class,
            AppHttpMiddlewareVerifyCsrfToken::class,
            IlluminateRoutingMiddlewareSubstituteBindings::class,
        ],

        'api' => [
            'throttle:60,1',
            'bindings',
        ],
    ];

    /**
     * The application's route middleware.
     *
     * These middleware may be assigned to groups or used individually.
     *
     * @var array
     */
    protected $routeMiddleware = [
        'auth' => AppHttpMiddlewareAuthenticate::class,
        'auth.basic' => IlluminateAuthMiddlewareAuthenticateWithBasicAuth::class,
        'bindings' => IlluminateRoutingMiddlewareSubstituteBindings::class,
        'can' => IlluminateAuthMiddlewareAuthorize::class,
        'guest' => AppHttpMiddlewareRedirectIfAuthenticated::class,
        'throttle' => IlluminateRoutingMiddlewareThrottleRequests::class,
        'role' => izacoEntrustMiddlewareEntrustRole::class,
        'permission' => izacoEntrustMiddlewareEntrustPermission::class,
        'ability' => izacoEntrustMiddlewareEntrustAbility::class,
        'dashboard' => AppHttpMiddlewaredashboardMiddleware::class,
        'system' => AppHttpMiddlewaresystemMiddleware::class
    ];
}