I am developing a RESTful API with Laravel 5.2. In the token guard located at \Illuminate\Auth\TokenGuard\TokenGuard.php
on line 46 the column name for the token is defined as api_token
:
$this->storageKey = 'api_token';
I want to change this column name to something else, for example api_key
.
How can I do this? I do not want to modify the core TokenGuard.php
file.
You can use auth()->user()->id or Auth::user()->id to get current user id. Save this answer.
Users of the REST API can authenticate by providing a user ID and password to the REST API login resource with the HTTP POST method. An LTPA token is generated that enables the user to authenticate future requests. This LTPA token has the prefix LtpaToken2 .
Just run php artisan make:auth and php artisan migrate in a fresh Laravel application. Then, navigate your browser to http://your-app.test/register or any other URL that is assigned to your application. These two commands will take care of scaffolding your entire authentication system!
Laravel includes an authentication guard that will automatically validate API tokens on incoming requests. You only need to specify the auth:api middleware on any route that requires a valid access token: use Illuminate\Http\Request; Route::middleware('auth:api')->get('/user', function(Request $request) {
The built in TokenGuard
does not have a way to modify the storageKey
field. Therefore, you will need to create your own Guard
class that sets the field, and tell Auth
to use your Guard
class.
First, start by creating a new Guard
class that extends the base TokenGuard
class. In this example, it is created at app/Services/Auth/MyTokenGuard.php
:
namespace App\Services\Auth;
use Illuminate\Http\Request;
use Illuminate\Auth\TokenGuard;
use Illuminate\Contracts\Auth\UserProvider;
class MyTokenGuard extends TokenGuard
{
public function __construct(UserProvider $provider, Request $request)
{
parent::__construct($provider, $request);
$this->inputKey = 'api_key'; // if you want to rename this, as well
$this->storageKey = 'api_key';
}
}
Once you've created your class, you need to let Auth
know about it. You can do this in the boot()
method on your AuthServiceProvider
service provider:
public function boot(GateContract $gate)
{
$this->registerPolicies($gate);
Auth::extend('mytoken', function($app, $name, array $config) {
return new \App\Services\Auth\MyTokenGuard(Auth::createUserProvider($config['provider']), $app['request']);
});
}
And finally, you need to tell Auth
to use your new mytoken
guard. This is done in the config/auth.php
config file.
'guards' => [
'api' => [
'driver' => 'mytoken',
'provider' => 'users',
],
],
Unfortunately there is no way to configure that.
The only way to use an other key is to create your own "Guard": Adding Custom Guards.
You can extend the TokenGuard
class and override the __constructor
with your own column names.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With