Laravel Passport 使用不同的模型

Posted 2023-03-15

【中文标题】Laravel Passport 使用不同的模型

【英文标题】：Laravel Passport use Different Model

【发布时间】：2017-05-03 00:54:42

【问题描述】：

我想向 Laravel 添加一个使用 Passport 但具有不同模型（不是用户）的自定义保护，但是当我尝试为这个保护设置用户时它不起作用。

配置/auth.php：

<?php

return [

/*
|--------------------------------------------------------------------------
| Authentication Defaults
|--------------------------------------------------------------------------
|
| This option controls the default authentication "guard" and password
| reset options for your application. You may change these defaults
| as required, but they're a perfect start for most applications.
|
*/

'defaults' => [
    'guard' => 'web',
    'passwords' => 'users',
],

/*
|--------------------------------------------------------------------------
| Authentication Guards
|--------------------------------------------------------------------------
|
| Next, you may define every authentication guard for your application.
| Of course, a great default configuration has been defined for you
| here which uses session storage and the Eloquent user provider.
|
| All authentication drivers have a user provider. This defines how the
| users are actually retrieved out of your database or other storage
| mechanisms used by this application to persist your user's data.
|
| Supported: "session", "token"
|
*/

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],

    'api' => [
        'driver' => 'passport',
        'provider' => 'users',
    ],

    'conference' => [
        'driver' => 'passport',
        'provider' => 'participants',
    ],
],

/*
|--------------------------------------------------------------------------
| User Providers
|--------------------------------------------------------------------------
|
| All authentication drivers have a user provider. This defines how the
| users are actually retrieved out of your database or other storage
| mechanisms used by this application to persist your user's data.
|
| If you have multiple user tables or models you may configure multiple
| sources which represent each model / table. These sources may then
| be assigned to any extra authentication guards you have defined.
|
| Supported: "database", "eloquent"
|
*/

'providers' => [
    'users' => [
        'driver' => 'eloquent',
        'model' => App\Models\User::class,
    ],

    'participants' => [
        'driver' => 'eloquent',
        'model' => App\Models\Participant::class,
    ],

    // 'users' => [
    //     'driver' => 'database',
    //     'table' => 'users',
    // ],
],

/*
|--------------------------------------------------------------------------
| Resetting Passwords
|--------------------------------------------------------------------------
|
| Here you may set the options for resetting passwords including the view
| that is your password reset e-mail. You may also set the name of the
| table that maintains all of the reset tokens for your application.
|
| You may specify multiple password reset configurations if you have more
| than one user table or model in the application and you want to have
| separate password reset settings based on the specific user types.
|
| The expire time is the number of minutes that the reset token should be
| considered valid. This security feature keeps tokens short-lived so
| they have less time to be guessed. You may change this as needed.
|
*/

'passwords' => [
    'users' => [
        'provider' => 'users',
        'email' => 'spark::auth.emails.password',
        'table' => 'password_resets',
        'expire' => 60,
    ],
],

];

在控制器中，我正在为自定义守卫设置用户：

    auth()->guard('conference')->setUser($participant);

api.php:

Route::group(['prefix' => 'activity', 'middleware' => ['auth:conference', 'api']], function ()  //

    Route::group(['prefix' => 'participant/participant'], function () 
        Route::any('join', 'API\ConferenceController@join');

    );
);

参与者模型：

use Laravel\Passport\HasApiTokens;
use Illuminate\Foundation\Auth\User as Authenticatable;

class Participant extends Authenticatable

    use Enums, SoftDeletes, RequiresUUID, HasApiTokens, Notifiable;

但我无法访问我得到 401 的路线。当我将“会议”守卫的提供者更改为“用户”时，它可以正常工作。

我错过了什么？

【参考方案1】：

这可能会有所帮助：

我的 AdminAPI 网址：https://example.com/api/login 我的客户 API 网址：https://example.com/api.customer/login

将此添加到任何ServiceProvider（我已在自定义路由之前添加到RouteServiceProvider.php）

// Fix/Support for multiple user with different table by changing provider on api.customer circumstances
  Config::set('auth.guards.api.provider', request()->input('provider', starts_with(request()->path(), 'api.customer') ? 'customers' : 'users'));`

并且必须在 config/auth.php 的 providers 数组中添加您的自定义提供程序

'customers' => [
        'driver' => 'eloquent',
        'model' => App\Customer::class,
    ],

【讨论】：

关于这个问题的任何更新？寻找另一种解决方法，而不是与供应商或 config::set 相关

【参考方案2】：

如果您只是将用户模型更改为“参与者”，则可以在 api 中将提供者替换为“参与者”。 Multi auth 我找到了一个临时解决方案，想法来自https://github.com/laravel/passport/issues/161

和http://esbenp.github.io/2017/03/19/modern-rest-api-laravel-part-4/

Laravel\Passport\Brigde\UserRepository.php 文件添加：

public function getEntityByUserCredentials($username, $password, $grantType, ClientEntityInterface $clientEntity, $provider) 
		$provider = config('auth.guards.' . $provider . '.provider');
		if (is_null($model = config('auth.providers.' . $provider . '.model'))) 
			throw new RuntimeException('Unable to determine authentication model from configuration.');
		
		if (method_exists($model, 'findForPassport')) 
			$user = (new $model)->findForPassport($username);
		 else 
			$user = (new $model)->where('email', $username)->first();
		
		if (!$user) 
			return;
		 elseif (method_exists($user, 'validateForPassportPasswordGrant')) 
			if (!$user->validateForPassportPasswordGrant($password)) 
				return;
			
		 elseif (!$this->hasher->check($password, $user->getAuthPassword())) 
			return;
		
		return new User($user->getAuthIdentifier());
	

League\OAuth2\Server\Grant\PasswordGrant.php 78 行添加

$provider = $this->getRequestParameter('provider', $request);

和94行添加$provider，如：

$user = $this->userRepository->getEntityByUserCredentials(
        $username,
        $password,
        $this->getIdentifier(),
        $client,
        $provider
    );

写LoginProxy（实际上它应该在构造函数中接收不同的模型）如：

class LoginProxy 
	const REFRESH_TOKEN = 'refreshToken';
	private $client;
	private $user;
	public function __construct(User $user, Client $client) 
		$this->user = $user;
		$this->client = $client;
	
	public function attemptLogin($mobile, $password) 
		$user = $this->user->where('mobile', $mobile)->first();
		if (!is_null($user)) 
			return $this->proxy('password', [
				'username' => $mobile,
				'password' => $password,
			]);
		
		return response()->json('error for 401', 401);
	
	public function attemptRefresh() 
		$refreshToken = $this->request->cookie(self::REFRESH_TOKEN);
		return $this->proxy('refresh_token', [
			'refresh_token' => $refreshToken,
		]);
	
	public function proxy($grant_type, array $data = []) 
		$data = array_merge($data, [
			'client_id' => env('PASSWORD_CLIENT_ID'),
			'client_secret' => env('PASSWORD_CLIENT_SECRET'),
			'grant_type' => $grant_type,
			'scope' => '*',
		]);
		$response = $this->client->post(url('/oauth/token'), [
			'form_params' => $data,
		]);
		$data = json_decode($response->getBody()->getContents());
		return response()->json([
			'token_type' => $data->token_type,
			'access_token' => $data->access_token,
			'refresh_token' => $data->refresh_token,
			'expires_in' => $data->expires_in,
		], 200);
	
	public function logout() 
		$accessToken = $this->auth->user()->token();
		$refreshToken = $this->db
			->table('oauth_refresh_tokens')
			->where('access_token_id', $accessToken->id)
			->update([
				'revoked' => true,
			]);
		$accessToken->revoke();
	

在您的 LoginController 中，调用特定方法：

class LoginController extends Controller 
	private $loginProxy;
	public function __construct(LoginProxy $loginProxy) 
		$this->loginProxy = $loginProxy;
	
	public function login(LoginRequest $request) 
		$mobile = $request->get('mobile');
		$password = $request->get('password');
		$provider = $request->get('provider');
		return $this->loginProxy->attemptLogin($mobile, $password, $provider);
	
	public function refresh(Request $request) 
		return $this->response($this->loginProxy->attemptRefresh());
	
	public function logout() 
		$this->loginProxy->logout();
		return $this->response(null, 204);
	

现在您可以向其发布不同的提供者参数。

【讨论】：

@howong-alex 更改供应商代码真的可以吗？！当您想要更新存储库时会发生什么？

不能修改供应商代码。如果这样做，您的更改将被作曲家更新覆盖。

超级愚蠢的答案。永远不要修改供应商目录中的文件是基本知识。