详解Laravel5.6 Passport实现Api接口认证

composer require laravel/passport  
#安装完成后，在composer.json文件中会看到文件版本信息

Laravel\Passport\PassportServiceProvider::class,

php artisan migrate #数据库中会生成接口认证所需的5张表

php artisan passport:client --password
#创建了client_id和client_secret,前端登录验证的时候必须把这两个玩意儿带着

php artisan passport:keys

use Laravel\Passport\Passport;
public function boot() { 
  $this->registerPolicies(); 
  Passport::routes(); //接口认证的路由
}

'guards' => [
  'web' => [
    'driver' => 'session',
    'provider' => 'users',
  ],

  'api' => [
    'driver' => 'passport',
    'provider' => 'customers',
  ],
],

'providers' => [
  'users' => [
    'driver' => 'eloquent',
    'model' => App\User::class,
  ],
  'customers' => [
    'driver' => 'eloquent',
    'model' => App\Models\Shop\Customer::class,
  ],
],

protected $routeMiddleware = [
'client.credentials'=>\Laravel\Passport\Http\Middleware\CheckClientCredentials::class,
];

Route::group(['prefix' => 'cart', 'middleware' => ['client.credentials']], function () {
  ...
});

use Illuminate\Foundation\Auth\User as Authenticatable;
use Laravel\Passport\HasApiTokens;

class Customer extends Authenticatable
{
  use HasApiTokens;
   ....  
}

import Login from '@/components/customer/Login'
export default new Router({
 routes: [
    ....
  {
   path: '/customer/login',
   name: 'Login',
   component: Login
  },
 ]
})

<template>
 <div>
  <input type="email" v-model="customer.email" placeholder="请输入邮箱">
  <input type="password" v-model="customer.password" placeholder="请输入密码">
  <button @click.prevent="submit">登 录</button>
 </div>
</template>

<script>
 export default {
  data() {
   return {
    customer: {
     email: '',
     password: ''
    }
   }
  },
  methods: {
   submit() {
    //将数据配置好
    const data = {
     grant_type: 'password', //oauth的模式
     client_id: 1,  //上面所说的client_id
     client_secret: 'CO331cA1mqiKgGvvgiDzPxh4CUu19vSEiqxM7LHD',//同上
     username: this.customer.email,
     password: this.customer.password,
    }
    this.axios.post('/oauth/token', data)
     .then(res => {
      if (res.status == 200) { //如果成功了，就把access_token存入localStorage
       localStorage.token_type = res.data.token_type
       localStorage.access_token = res.data.access_token
       this.$router.push({name:'Index'})
      }
     })
   }
  }
 }
</script>

//#创建http.js文件
import axios from 'axios'
import router from '@/router'

// axios 配置
axios.defaults.timeout = 5000;
axios.defaults.baseURL = 'http://wechat.test/';


// http request 拦截器
axios.interceptors.request.use(
 config => { //将所有的axios的header里加上token_type和access_token
  config.headers.Authorization = `${localStorage.token_type} ${localStorage.access_token}`;
  return config;
 },
 err => {
  return Promise.reject(err);
 });

// http response 拦截器
axios.interceptors.response.use(
 response => {
  return response;
 },
 error => {
  // 401 清除token信息并跳转到登录页面
  if (error.response.status == 401) {
   alert('您还没有登录，请先登录')
   router.replace({  //如果失败，跳转到登录页面
    name: 'Login'
   })
  }
  return Promise.reject(error.response.data)
 });

export default axios;

$customer_id = auth('api')->user()->id;
return $customer_id;