I am using the jwt for creating the tokens while login. After I login, I try to hit the /me api pointing to the function:
public function me()
{
$user = auth()->user();
return response()->json($user);
}
I followed the JWT official documentation, initially I was able to get the response for the API. Suddenly it started throwing a
{
"message": "Unauthenticated."
}
Why is this happening?? Is there any workaround? It would be great if someone could help.
I tried the documentation setup and it worked fine, you might have missed passing the authentication header in your API call. Since I don't know what your setup is, I can only say that when you log in, you should use the token received in API calls with authentication.
PostMan Software: In the headers tab add a key as Authorization
and assign token for value with Bearer
, like Bearer token...
...
for more help please clarify how you're trying api calls.
Edit: added an alternate way for using middleware
Another way of implementing or using middleware :
Create a middleware with JWT name and put the below code in the handle function
Don't forget to import JWTAuth
.
use JWTAuth;
public function handle($request, Closure $next)
{
JWTAuth::parseToken()->authenticate();
return $next($request);
}
Then in Kernel add jwt to $routeMiddleware like this :
protected $routeMiddleware = [
// you should add below code.
'jwt' => \App\Http\Middleware\JWT::class,
];
in routes/api
Route::apiResource('/posts', 'PostController');
now in PostController add your middleware to Constructor like this.
public function __construct()
{
$this->middleware('jwt', ['except' => ['index','show']]);
}
So in the constructor you will set your middleware
base on JWT, then with except
you can modify which one of your functions don't need to authentication base on JWT token. now when you use auth()->user()
you can get your info or etc.
So if I had index, show, update, delete, store, create
when i try to do API call if i use GET METHOD
for url.com/posts
or url.com/posts/23
i can get my posts without passing JWT
token.
When you tried to use JWT
you should realize that it's working base on token you're passing, you're getting token when you using login, but you're not getting user info because you're not passing user's token to app, before all of this you should consider to verify token then do the rest Logics. Good Luck.
Edit : added more info
auth.php
'defaults' => [
'guard' => 'api',
'passwords' => 'users',
],
'guards' => [
'web' => [
'driver' => 'session',
'provider' => 'users',
],
'api' => [
'driver' => 'jwt',
'provider' => 'users',
],
],