浏览代码

add token sign

xielin 6 年之前
父节点
当前提交
a45b2342bf
共有 1 个文件被更改,包括 8 次插入1 次删除
  1. 8 1
      app/Http/Middleware/JwtAuthMiddleware.php

+ 8 - 1
app/Http/Middleware/JwtAuthMiddleware.php

@@ -21,7 +21,14 @@ class JwtAuthMiddleware
     {
 
         try {
-            $user = JWTAuth::parseToken()->authenticate();
+            $data = JWTAuth::decode(JWTAuth::getToken())['user'];
+            if ($data->sign !== md5($data->uid . env('JWT_SECRET'))) {
+                $error = [
+                    'message' => 'request is not allow',
+                    'code' => 401,
+                ];
+                return response()->json($error);
+            }
         } catch (TokenExpiredException $e) {
             $error = [
                 'message' => 'Token is Expired',