{"id":815,"date":"2025-06-12T00:19:45","date_gmt":"2025-06-11T16:19:45","guid":{"rendered":"https:\/\/www.zhaozhao123.cn\/php\/php-application-manual\/laravel\/815.html"},"modified":"2025-06-12T00:19:45","modified_gmt":"2025-06-11T16:19:45","slug":"laravel%ef%bc%9a%e5%a6%82%e4%bd%95%e4%bb%8e%e8%af%b7%e6%b1%82%e5%a4%b4%e4%b8%ad%e6%8f%90%e5%8f%96%e8%ba%ab%e4%bb%bd%e9%aa%8c%e8%af%81%e4%bb%a4%e7%89%8c","status":"publish","type":"my1js","link":"https:\/\/www.zhaozhao123.cn\/php\/my1js\/815.html","title":{"rendered":"Laravel\uff1a\u5982\u4f55\u4ece\u8bf7\u6c42\u5934\u4e2d\u63d0\u53d6\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c"},"content":{"rendered":"
\r\n
\r\n
\r\n
\r\n
\r\n
\"Bug编译狮\"<\/figure>\r\n\r\n\r\n\r\n

Bug编译狮<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
\r\n
\r\n

在 Laravel 中，你可以通过多种方式从请求头中提取身份验证令牌。以下是几种常见的方法：<\/p>\n

方法一：使用 Request<\/code> 对象<\/h3>\n
use IlluminateHttpRequest;\n\npublic function authenticate(Request $request)\n{\n    \/\/ 从请求头中获取身份验证令牌\n    $token = $request->header('Authorization');\n\n    if (!$token) {\n        return response()->json(['message' => 'Token not provided'], 401);\n    }\n\n    \/\/ 检查令牌的有效性（这里假设你有一个验证器）\n    if (!auth()->attempt(['api_token' => $token])) {\n        return response()->json(['message' => 'Invalid token'], 401);\n    }\n\n    \/\/ 如果令牌有效，返回用户信息\n    $user = auth()->user();\n    return response()->json($user, 200);\n}<\/code><\/pre>\n
方法二：使用 Auth<\/code> facade<\/h3>\n
use IlluminateSupportFacadesAuth;\n\npublic function authenticate()\n{\n    \/\/ 从请求头中获取身份验证令牌\n    $token = request()->header('Authorization');\n\n    if (!$token) {\n        return response()->json(['message' => 'Token not provided'], 401);\n    }\n\n    \/\/ 使用 Auth facade 进行身份验证\n    if (Auth::guard('api')->attempt(['api_token' => $token])) {\n        \/\/ 如果令牌有效，返回用户信息\n        $user = Auth::user();\n        return response()->json($user, 200);\n    } else {\n        return response()->json(['message' => 'Invalid token'], 401);\n    }\n}<\/code><\/pre>\n
方法三：使用中间件<\/h3>\n
如果你希望在整个应用程序中都使用相同的验证逻辑，可以创建一个自定义的中间件。<\/p>\n
创建中间件<\/h4>\n
php artisan make:middleware AuthenticateToken<\/code><\/pre>\n
编辑中间件文件<\/h4>\n
namespace AppHttpMiddleware;\n\nuse Closure;\nuse IlluminateSupportFacadesAuth;\n\nclass AuthenticateToken\n{\n    public function handle($request, Closure $next)\n    {\n        \/\/ 从请求头中获取身份验证令牌\n        $token = $request->header('Authorization');\n\n        if (!$token) {\n            return response()->json(['message' => 'Token not provided'], 401);\n        }\n\n        \/\/ 使用 Auth facade 进行身份验证\n        if (Auth::guard('api')->attempt(['api_token' => $token])) {\n            \/\/ 如果令牌有效，继续处理请求\n            return $next($request);\n        } else {\n            return response()->json(['message' => 'Invalid token'], 401);\n        }\n    }\n}<\/code><\/pre>\n
注册中间件<\/h4>\n
在 app\/Http\/Kernel.php<\/code> 文件中注册这个中间件。<\/p>\n
protected $routeMiddleware = [\n    \/\/ 其他中间件...\n    'auth.api' => AppHttpMiddlewareAuthenticateToken::class,\n];<\/code><\/pre>\n
在路由中应用中间件<\/h4>\n
Route::group([\n    'prefix' => 'api',\n    'middleware' => 'auth.api',\n], function () {\n    Route::get('\/users', 'UserController@index');\n});<\/code><\/pre>\n
这些方法可以帮助你在 Laravel 应用中安全地从请求头中提取和验证身份验证令牌。选择哪种方法取决于你的具体需求和个人偏好。<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
\r\n
\r\n
\r\n
\r\n
\r\n
\"黑板Bug讲师\"<\/figure>\r\n\r\n\r\n\r\n
黑板Bug讲师<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
\r\n
\r\n
介绍<\/h2>
在使用Laravel构建Web应用时，处理身份验证是一个关键步骤。常见的方法之一是使用令牌来认证用户，这些令牌通常通过请求头传递。在这篇教程中，我们将详细介绍如何使用Laravel的强大Request类、中间件和身份验证功能从请求头中提取身份验证令牌。这种技术特别适用于处理RESTful API和单页面应用程序（SPA），其中token基的认证标准做法。<\/p>
理解请求对象<\/h2>
Laravel的请求对象提供了以面向对象的方式与服务器接收到的HTTP请求交互的方法。这包括获取头信息、查询字符串参数、POST数据等。首先，需要了解如何在Laravel应用中访问请求对象。<\/p>
\/\/ Accessing request in a controller method\npublic function myControllerMethod(\n    IlluminateHttpRequest $request)\n{\n    $token = $request->header('Authorization');\n}\n<\/code><\/pre>
创建一个用于提取令牌的中间件<\/h2>
中间件在Laravel中是一个强大的功能，允许您过滤进入应用程序的HTTP请求。我们可以创建一个自定义中间件来从请求头中提取认证令牌。<\/p>
php artisan make:middleware TokenExtractionMiddleware\n<\/code><\/pre>
在创建中间件后，你需要定义逻辑以从内部提取令牌。handle()<\/code>方法在新创建的TokenExtractionMiddleware.php<\/code>文件。<\/p>
namespace AppHttpMiddleware;\n\nuse Closure;\n\nclass TokenExtractionMiddleware\n{\n    public function handle($request, Closure $next)\n    {\n        $token = $request->bearerToken();\n        if (!$token) {\n            \/\/ Handle the case where token is absent\n            return response('Unauthorized', 401);\n        }\n        \/\/ You can attach the token to the request object\n        $request->request->add(['access_token' => $token]);\n\n        return $next($request);\n    }\n}\n<\/code><\/pre>
现在，创建中间件后，你需要在你的应用中注册它。kernel.php<\/code>确保它应用于请求。<\/p>
\/\/ Within your Kernel.php's $routeMiddleware array\n'extract.token' => AppHttpMiddlewareTokenExtractionMiddleware::class,\n<\/code><\/pre>
现在，您可以使用这个中间件在您的路由或控制器中提取令牌。<\/p>
\/\/ Assigning middleware to routes\nRoute::get('\/api\/user', function () {\n    \/\/ Your secured resource access here\n})->middleware('extract.token');\n<\/code><\/pre>
与认证路由的工作<\/h2>
如果提取令牌的目的在于验证用户，你可以利用Laravel的认证守护系统。当使用API令牌时，许多开发人员会选择使用这种方法。auth:api<\/code>确保将该船与Laravel一起维护。通过在路由上附加此中间件，Laravel将为您提取和验证令牌。<\/p>
\/\/ This route will require a valid token\nto access the authenticated user details\nRoute::middleware('auth:api')->get('\/user', function (\n    IlluminateHttpRequest $request)\n{\n    return $request->user();\n});\n<\/code><\/pre>
使用Laravel Sanctum创建代币<\/h2>
Laravel Sanctum 是一个简单的包，用于API凭证认证，非常适合单页应用和简单API。当你安装并配置了Sanctum后，创建凭证非常容易。<\/p>
$user = AppModelsUser::find(1);\n$token = $user->createToken('Token Name')->plainTextToken;\n<\/code><\/pre>
从客户端向Laravel应用发送令牌通常会通过Authorization头进行。<\/p>
\/\/ Example Authorization header\nAuthorization: Bearer 1|abcdefghijklnopqrstuvwxyzABCDEFG\n<\/code><\/pre>
错误处理和安全性考虑<\/h2>
当你从请求头中提取令牌时，务必实现适当的错误处理。令牌的有效性应始终被检查，并在令牌有问题时返回清晰的响应。始终记住使用HTTPS来保护令牌免受传输期间的泄露。<\/p>
结论。<\/h2>
综上所述，在Laravel中从请求头提取认证令牌可以通过多种方式实现。无论是控制器方法内、使用中间件，还是利用内置的身份验证守护程序，Laravel提供了针对该任务的工具。请注意，在安全性和API令牌管理方面遵循最佳实践，尤其是在考虑其范围和生命周期时。现在你应该对如何在Laravel应用中提取和处理认证令牌有了全面的理解。愉快编程！<\/p><\/body>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
\r\n
\r\n
\r\n
\r\n
\r\n
\"长工码奴1523\"<\/figure>\r\n\r\n\r\n\r\n
长工码奴1523<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
\r\n
\r\n
要在 Laravel 中从 HTTP 请求头中提取身份验证令牌，你可以使用以下方法：<\/p>\n
首先，确保在你的 config\/app.php<\/code> 文件中启用了 JWT (JSON Web Tokens)。<\/p>\n
'middleware' => [\n    'throttle:60,1',\n],\n'servers' => [\n    [\n        'driver' => 'redis',\n        'host' => env('REDIS_HOST', 'localhost'),\n        'password' => env('REDIS_PASSWORD', null),\n        'timeout' => 30,\n        'ssl' => true,\n        'decode' => true,\n        'key' => env('REDIS_KEY', ''),\n    ],\n],<\/code><\/pre>\n
然后，创建一个新的中间件来处理身份验证令牌的提取：<\/p>\n
use IlluminateHttpRequest;\nuse IlluminateSupportFacadesAuth;\n\nclass AuthenticateMiddleware extends Middleware {\n    \/**\n     * Handle an incoming request.\n     *\n     * @param Request $request\n     * @return mixed\n     *\/\n    public function handle(Request $request, Closure $next)\n    {\n        if ($request->headers->has('Authorization')) {\n            \/\/ Extract the token from the Authorization header\n            $token = $request->header('Authorization');\n\n            return $this->authenticate($token);\n        }\n\n        return $next($request);\n    }\n\n    protected function authenticate(string $token): bool\n    {\n        try {\n            return Auth::attempt(['token' => $token]);\n        } catch (IlluminateContractsAuthUnauthorizedException $e) {\n            return false;\n        }\n    }\n}<\/code><\/pre>\n
在这个例子中，我们定义了一个名为 AuthenticateMiddleware<\/code> 的中间件。它监听 Authorization<\/code> 头部，并尝试从中提取并验证令牌。如果成功验证，authenticate()<\/code> 方法将返回 true<\/code>；否则，它将调用 Auth::attempt()<\/code> 并返回 false<\/code>。<\/p>\n
请注意，这只是一个基本示例，实际应用中可能会需要更复杂的逻辑来处理不同的情况和错误。例如，你可能需要检查用户是否已过期，或者在认证失败时采取其他措施。<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Bug编译狮 在 Laravel 中，你可以通过多种方式从请求&#2..<\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false},"tags":[],"my1js2nav":[44],"tuisongtax":[],"class_list":["post-815","my1js","type-my1js","status-publish","hentry","my1js2nav-laravel"],"acf":{"qian_art_seotitle":"","qian_art_seotitle_source":{"label":"SEO\u6807\u9898","type":"text","formatted_value":""},"qian_art_seokws":"","qian_art_seokws_source":{"label":"SEO\u5173\u952e\u8bcd","type":"text","formatted_value":""},"qian_art_stzhong":"","qian_art_stzhong_source":{"label":"\u4e2d | \u77ed\u6807\u9898","type":"text","formatted_value":""}},"_links":{"self":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js\/815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js"}],"about":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/types\/my1js"}],"author":[{"embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/users\/1"}],"wp:attachment":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/media?parent=815"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tags?post=815"},{"taxonomy":"my1js2nav","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js2nav?post=815"},{"taxonomy":"tuisongtax","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tuisongtax?post=815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}