Tymon/JWT-Auth ???? ??????. 2. JWT ?? ?? ??; 3. JWT ?? ???? .env? ?????. 4. ??? ??? jwtsubject ?????? ?????. 5. ?? ??? JWT ??? ??????. 6. ???, ?? ??, ?? ?? ? ??? ??? ???? ????? ????. 7. API.PHP?? ??? ???? ??? ?????? : API ????; 8. ??? ?? ?? ? ??? ?????? : Bearer ?? ????? ?????. ?? ????? JWT_SECRET? ???? ?? ??? ???? ?????????, ????? Laravel? JWT? ???? Stationeles API ??? ???????.

Laravel?? JWT (JSON Web Token) ??? ???? ?? SANTELESS API? ?????? ???? ?? ?????. ??? ???? tymon/jwt-auth ???? ???? ??? ??? ??????.

1. JWT ???? ??????

?? ???? ?? tymon/jwt-auth ???? ??????.

 ???? Tymon/JWT-Auth? ?????

?? : Laravel 10/9? ?? ?? ??? ??? ???? ??? ??????. ?? ???? ^2.1 ??????.

2. ?? ??? ??????

Artisan? ???? JWT ?? ??? ??????.

 PHP Artisan ?? ?? : ?? -provider = "Tymon \ jwtauth \ Providers \ LaravelserviceProvider"

????? ?? ?? (TTL, ???? ?)? ??? ?? ? ??? config/jwt.php ??? ?????.

3. ?? ?? ??????

?? ????? ?? ?? ??????.

 PHP Artisan JWT : ??

? ??? .env ??? JWT_SECRET ??? ????? - ??? ?????? ?????.

.env ? ? :

 jwt_secret = your_generated_secret_key_here

4. ??? ??? ?????

User ?? (????? App\Models\User )? JWTSubject ??? ??????.

 <? php

?? ???? ? \ ??;

Illuminate \ Foundation \ auth \ user? authenticatable? ??????.
tymon \ jwtauth \ contracts \ jwtsubject;

??? ???? authenticatable emplements jwtsubject? ?????
{
    // ...

    /**
     * JWT? ?? ??? ?? ? ???? ?????.
     */
    ?? ?? getjwtidentifier ()
    {
        return $ this-> getkey ();
    }

    /**
     * JWT? ???? ??? ?? ???? ?? ? ? ? ??? ?????.
     */
    ?? ?? getJwtCustomClaims ()
    {
        ?? [];
    }
}

5. ?? ??? ??????

JWT ??? ????? config/auth.php ????????.

 '??'=> [
    '?'=> [
        '????'=> '??',
        '???'=> '???',
    ],,

    'API'=> [
        '????'=> 'jwt', // API? JWT ????? ?????
        '???'=> '???',
    ],,
],,

?? api ??? api ??? ????? ?????? (??? ?? Laravel?? ??????).

6. ?? ????? ????

???, ?? ??, ?? ?? ? ??? ?? ??? ?? ? ????? ??????.

 PHP Artisan Make : ???? ? Authcontroller

??? ?? ??? ??

 ?? ???? ? \ http \ ????;

App \ Models \ User? ?????.
Illuminate \ http \ request? ??????.
Illuminate \ support \ Facades \ Hash? ??????.
tymon \ jwtauth \ ??? ?????? \ jwteexception;
jwtauth? ??????.

??? AuthController? ????? ?????
{
    ?? ?? ??? (?? $ ??)
    {
        $ credentials = $ request-> ? ( '???', '????');

        ???? {
            if (! $ token = jwtauth :: ?? ($ credentials)) {
                return response ()-> json ([ 'error'=> 'invalid credentials'], 401);
            }
        } catch (jwtexception $ e) {
            return response ()-> json ([ 'error'=> '? ??? ?? ? ??', 500);
        }

        return response ()-> json (compact ( 'Token'));
    }

    ?? ?? getAuthenticatedUser ()
    {
        ???? {
            if (! $ user = jwtauth :: parsetoken ()-> authenticate ()) {
                return response ()-> json ([ 'user_not_found'], 404);
            }
        } catch (jwtexception $ e) {
            return response ()-> json ([ 'error'=> $ e-> getMessage ()], $ e-> getStatuscode ());
        }

        return response ()-> json (compact ( 'user'));
    }

    ?? ?? ?? ?? ()
    {
        jwtauth :: invalidate (jwtauth :: getToken ());

        return response ()-> json ([ 'message'=> '????? ?? ??']);
    }

    ?? ?? ?? ?? ()
    {
        $ token = jwtauth :: refresh ();

        return response ()-> json ([ 'token'=> $ token]);
    }
}

7. API ??? ??????

routes/api.php :

 App \ http \ Controllers \ AuthController? ??????.

route :: post ( 'login', [authcontroller :: class, 'login']);
Route :: Middleware ( 'Auth : Api')-> group (function () {
    route :: get ( 'me', [authcontroller :: class, 'getauthenticatedUser']);
    route :: post ( 'logout', [authcontroller :: class, 'logout']);
    route :: post ( 'Refresh', [authcontroller :: class, 'refresh']);
});

?? ?? ? ???? Authorization ??? ??? JWT? ?????.

 ?? : Bearer <Your-Token-Here>

8. ??? ???????

1. ??? : email ? password ? Post /api/login → Get Token.
2. ??? ???? : ?? ??? ?? /api/me Authorization: Bearer <token> → get ???.
3. ?? ?? ?? : Post /api/refresh → ? ??? ????.
4. ?? ?? : Post /api/logout → ?? ??? ??????.

?? ?? : ?? ??? ??? ?????

config/jwt.php ?? :

 'ttl'=> 60, // ?? 60 ? ?? ?????
'refresh_ttl'=> 20160, // 14 ? ??? ?? ?? ? ????

?? ? ?? ?

• ???? ?? HTTP? ??????.
• ?? (? : HttpOnly ?? ?? ??? ??)? ??? ??? ??????.
• ??? ???? ?? ??? ???? ??? ?? ?????.
• ?? ?? ??? ??? ??????.

????? ?? ??. tymon/jwt-auth ? ?? Laravel? JWT Auth? ?? ??? ???? ?????. JWT_SECRET ? ???? ???? ??? ???? ??????.

? ??? Laravel?? JWT ??? ???? ??? ??????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!