How to return json response in AuthServiceProvider?
0
I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.
I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?
Is AuthServiceProvider.php (below is my current code) a good place for decoding token?
<?php
namespace AppProviders;
use AppUser;
use IlluminateSupportServiceProvider;
use FirebaseJWTJWT;
use FirebaseJWTExpiredException;
use Exception;
class AuthServiceProvider extends ServiceProvider
{
/**
* Boot the authentication services for the application.
*
* @return void
*/
public function boot()
{
// Here you may define how you wish users to be authenticated for your Lumen
// application. The callback which receives the incoming request instance
// should return either a User instance or null. You're free to obtain
// the User instance via an API token or any other method necessary.
$this->app['auth']->viaRequest('api', function ($request) {
$token = $request->bearerToken();
if(!$token) {
// Unauthorized response if token not there
throw new Exception('token not provided');
}
try {
$credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
} catch(ExpiredException $e) {
return response()->json([
'error' => 'token expired'
], 400);
} catch(Exception $e) {
return response()->json([
'error' => 'token error'
], 400);
}
return User::find($credentials->sub);
});
}
}
php rest authentication jwt lumen
asked Nov 23 '18 at 17:36
haferhafer
2217
add a comment |
0
I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.
I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?
Is AuthServiceProvider.php (below is my current code) a good place for decoding token?
<?php
namespace AppProviders;
use AppUser;
use IlluminateSupportServiceProvider;
use FirebaseJWTJWT;
use FirebaseJWTExpiredException;
use Exception;
class AuthServiceProvider extends ServiceProvider
{
/**
* Boot the authentication services for the application.
*
* @return void
*/
public function boot()
{
// Here you may define how you wish users to be authenticated for your Lumen
// application. The callback which receives the incoming request instance
// should return either a User instance or null. You're free to obtain
// the User instance via an API token or any other method necessary.
$this->app['auth']->viaRequest('api', function ($request) {
$token = $request->bearerToken();
if(!$token) {
// Unauthorized response if token not there
throw new Exception('token not provided');
}
try {
$credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
} catch(ExpiredException $e) {
return response()->json([
'error' => 'token expired'
], 400);
} catch(Exception $e) {
return response()->json([
'error' => 'token error'
], 400);
}
return User::find($credentials->sub);
});
}
}
php rest authentication jwt lumen
asked Nov 23 '18 at 17:36
haferhafer
2217
add a comment |
0
0
0
I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.
I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?
Is AuthServiceProvider.php (below is my current code) a good place for decoding token?
<?php
namespace AppProviders;
use AppUser;
use IlluminateSupportServiceProvider;
use FirebaseJWTJWT;
use FirebaseJWTExpiredException;
use Exception;
class AuthServiceProvider extends ServiceProvider
{
/**
* Boot the authentication services for the application.
*
* @return void
*/
public function boot()
{
// Here you may define how you wish users to be authenticated for your Lumen
// application. The callback which receives the incoming request instance
// should return either a User instance or null. You're free to obtain
// the User instance via an API token or any other method necessary.
$this->app['auth']->viaRequest('api', function ($request) {
$token = $request->bearerToken();
if(!$token) {
// Unauthorized response if token not there
throw new Exception('token not provided');
}
try {
$credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
} catch(ExpiredException $e) {
return response()->json([
'error' => 'token expired'
], 400);
} catch(Exception $e) {
return response()->json([
'error' => 'token error'
], 400);
}
return User::find($credentials->sub);
});
}
}
php rest authentication jwt lumen
asked Nov 23 '18 at 17:36
haferhafer
2217
I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.
I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?
Is AuthServiceProvider.php (below is my current code) a good place for decoding token?
<?php
namespace AppProviders;
use AppUser;
use IlluminateSupportServiceProvider;
use FirebaseJWTJWT;
use FirebaseJWTExpiredException;
use Exception;
class AuthServiceProvider extends ServiceProvider
{
/**
* Boot the authentication services for the application.
*
* @return void
*/
public function boot()
{
// Here you may define how you wish users to be authenticated for your Lumen
// application. The callback which receives the incoming request instance
// should return either a User instance or null. You're free to obtain
// the User instance via an API token or any other method necessary.
$this->app['auth']->viaRequest('api', function ($request) {
$token = $request->bearerToken();
if(!$token) {
// Unauthorized response if token not there
throw new Exception('token not provided');
}
try {
$credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
} catch(ExpiredException $e) {
return response()->json([
'error' => 'token expired'
], 400);
} catch(Exception $e) {
return response()->json([
'error' => 'token error'
], 400);
}
return User::find($credentials->sub);
});
}
}
php rest authentication jwt lumen
php rest authentication jwt lumen
asked Nov 23 '18 at 17:36
haferhafer
2217
asked Nov 23 '18 at 17:36
haferhafer
2217
asked Nov 23 '18 at 17:36
haferhafer
2217
asked Nov 23 '18 at 17:36
haferhafer
2217
asked Nov 23 '18 at 17:36
haferhafer
2217
2217
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53450942%2fhow-to-return-json-response-in-authserviceprovider%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53450942%2fhow-to-return-json-response-in-authserviceprovider%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
