如何使用jwt slim中间件进行身份验证？

Question

这段代码有效，但是如何获得使用get请求查看/api内容的权限？

<?php
    use \Psr\Http\Message\ServerRequestInterface as Request;
    use \Psr\Http\Message\ResponseInterface as Response;

    require 'vendor/autoload.php';

    $app = new \Slim\App();

    $app->add(new \Slim\Middleware\JwtAuthentication([
        "path" => "/api", 
        "secret" => "1234"
    ]));

    $app->get('/api', function (Request $request, Response $response) {
      echo "Hi";
    });

    $app->get('/teste', function (Request $request, Response $response) {
      echo "Hi";
    });

    $app->run();

Answer 1

我使用Authorization: Bearer Mykey，关键需要在jwt模式下编码

Answer 2

1. Generate Token

使用firebase/php-jwt

$payload = [
    "sub" => "[email protected]"
];
    $token = JWT::encode($payload,'JWT-secret-key');

2. .htaccess Changes

如果使用Apache，请将以下内容添加到.htaccess文件中。否则PHP将无法访问Authorization：Bearer标头

RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

3. Middleware

$app->add(new \Slim\Middleware\JwtAuthentication([
    "path" => "/api",
    "passthrough" => ["/teste"],
    "secret" => "JWT-secret-key",
    "secure" => false,
    "callback" => function ($request, $response, $arguments) use ($container) {
        $container["jwt"] = $arguments["decoded"];
    },
    "error" => function ($request, $response, $arguments) {
        $data["status"] = "0";
        $data["message"] = $arguments["message"];
        $data["data"] = "";
        return $response
        ->withHeader("Content-Type", "application/json")
        ->write(json_encode($data, JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT));
    }
]));

4. Correct Request

5. Wrong Token Request

Reference Link