Download the PHP package iqbalatma/laravel-jwt-auth without Composer
On this page you can find all versions of the php package iqbalatma/laravel-jwt-auth. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download iqbalatma/laravel-jwt-auth
More information about iqbalatma/laravel-jwt-auth
Files in iqbalatma/laravel-jwt-auth
Package laravel-jwt-auth
Short Description Laravel JWT Blacklist and Refresh Custom Mechanism
License MIT
Informations about the package laravel-jwt-auth
laravel-jwt-auth
Laravel jwt with access and refresh mechanism custom from PHP-Open-Source-Saver / jwt-auth
Credits
This is package used PHP-Open-Source-Saver/jwt-auth that forked from tymondesigns/jwt-auth This packages just abstract PHP-Open-Source-Saver/jwt-auth and change refresh token behavior.
Why you need this package ?
PHP-Open-Source-Saver/jwt-auth package use only 1 token (access token) to get protected resource while I need 2 types of token (access and refresh). I make access token with short ttl and refresh token with long ttl. Why do i need 2 types of token ? When access token been compromised, it just short time access so hacker has limited time and cannot re-invoke new token. On PHP-Open-Source-Saver/jwt-auth to refresh token (re-invoke new token) is using access token I change this behavior so we will have 2 types of token. So when hacker get access token they cannot re-invoke new token because it's need refresh token.
The other case is when you set access token with short ttl, you cannot re-invoke new tokens because you need valid access token. On this package when your access token is invalid you still can re-invoke new token with refresh token
How to install this package ?
Install via composer
Copy service profider into config/app.php
Publish vendor using command below
Generate jwt secret key
Package ready to use
How to use this package ?
Here is how to use this package
Configure Auth Config Guard
Modify your config/auth.php
Update User Model
Modify your model contract and add some method that need to be implemented
Use Middleware on Route
Here is example how to protect route with middleware
How to invoke access token and refresh token
Here is how to invoke access token and refresh token