Download the PHP package livijn/multiple-tokens-auth without Composer
On this page you can find all versions of the php package livijn/multiple-tokens-auth. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download livijn/multiple-tokens-auth
More information about livijn/multiple-tokens-auth
Files in livijn/multiple-tokens-auth
Package multiple-tokens-auth
Short Description Adds the ability to use multiple tokens for the auth:api middleware.
License MIT
Homepage https://github.com/livijn/multiple-tokens-auth
Informations about the package multiple-tokens-auth
Important
This was released before Laravel Sanctum. I would recommend using Laravel Sanctum instead.
multiple-tokens-auth
Adds the ability to use multiple tokens for the auth:api middleware. Useful if you want to allow a user to be logged in to your e.g. SPA, iOS app and android app at the same time. The default token driver only allows one token per user.
It is possible to end up with a large table when using multiple tokens per user. Therefor we set an expiration date on the tokens. If possible, you should add the PurgeExpiredApiTokensJob
to your Schedule as the Step 6 describes. If not, you should somehow take care of the expired tokens.
You may take a look at the example app multiple-tokens-auth-testapp.
Install
-
Install the package with composer:
-
Publish the
multiple-tokens-auth.php
config & migrations:By default, the migration is shipped with the field
user_id
that hasunsignedBigInteger
. This needs to be manually changed if you useuuid
in your User model. -
Run the migrations:
-
Set the api guard driver to
multiple-tokens
in the fileconfig/auth.php
: -
Add the
HasApiTokens
trait to your User model. - (Optional) Add the
PurgeExpiredApiTokensJob
to your Schedule atConsole/Kernel.php
.
Usage
You can use this the same way as you would use the default Laravel token based API authorization. This package also supports hashing.
Sign in
When a user logs in, you should create a new api token by using the generateApiToken
method.
Sign out
When you want to log out a user, you can use the logout
method on the Auth facade. This will delete the token that was used for the current request.
Purging tokens
To delete all tokens connected to a user, use the purgeApiTokens
method.
Testing
Run the tests with:
Credits
License
The MIT License (MIT). Please see License File for more information.