jwt用户注销 PHP,php – 使用Laravel JWT-auth身份验证注销问题

您可以简单地在客户端销毁会话并在后端使令牌无效时,您不需要使用黑名单.

技术上破坏客户端上的令牌就足够了,但是对于会话劫持,在后端使其无效也是一个好主意.

如果您无效,则需要在收到Laravel的回复后销毁令牌.

JWTAuth::invalidate(JWTAuth::getToken())):

然后在角度方面

function logout()

{

UserService.logout().$promise.then(function() {

$cookieStore.remove('userToken');

// redirect or whatever

});

}

处理JWT异常的一种方法是在laravel中设置EventServiceProvider,这是我的样子：

use Illuminate\Contracts\Events\Dispatcher as DispatcherContract;

use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;

class EventServiceProvider extends ServiceProvider {

/**

* The event handler mappings for the application.

*

* @var array

*/

protected $listen = [

'tymon.jwt.valid' => [

'App\Events\JWTEvents@valid',],'tymon.jwt.user_not_found' => [

'App\Events\JWTEvents@notFound'

],'tymon.jwt.invalid' => [

'App\Events\JWTEvents@invalid'

],'tymon.jwt.expired' => [

'App\Events\JWTEvents@expired'

],'tymon.jwt.absent' => [

'App\Events\JWTEvents@missing'

]

];

/**

* Register any other events for your application.

*

* @param \Illuminate\Contracts\Events\Dispatcher $events

* @return void

*/

public function boot(DispatcherContract $events)

{

parent::boot($events);

//

}

}

您将在app.PHP中注册.

然后我用每个事件的方法实现JWTEvents类.

class JWTEvents extends Event {

// Other methods

public function invalid()

{

return response()->json(['error' => 'Token Invalid'],401);

die();

}

}

需要注意的重要一点是,我们正在捕获JWT异常并返回具有特定状态代码的json响应.

在角度方面,我在我的httpInterceptor类中捕获这些http状态代码.

angular.module('ngApp')

.factory('httpInterceptor',function($q,$log,$cookieStore,$rootScope,Response) {

return {

request: function(config) {

// Where you add the token to each request

},responseError: function(response) {

// Check if response code is 401 (or whatever)

if (response.status === 401) {

// Do something to log user out & redirect.

$rootScope.$broadcast('invalid.token');

}

}

}

});