'token is required', 'code' => 401, ]; return response()->json($error)->setStatusCode(401); } $data = JWTAuth::decode($token)['user']; //检测token是否存在黑名单中 if(Redis::zscore('blacklist_token', $token->get())){ $error = [ 'message' => 'token in blacklist', 'code' => 401, ]; return response()->json($error)->setStatusCode(401); } if ($data->sign !== md5($data->uid . config('customer.jwt_secret'))) { $error = [ 'message' => 'request is not allow', 'code' => 401, ]; return response()->json($error); } } catch (TokenExpiredException $e) { $error = [ 'message' => 'Token is Expired', 'code' => 401, ]; return response()->json($error)->setStatusCode(401); } catch (TokenInvalidException $e) { $error = [ 'message' => $e->getMessage(), 'code' => 401, ]; return response()->json($error)->setStatusCode(401); } catch (JWTException $e) { $error = [ 'message' => $e->getMessage(), 'code' => 401, ]; return response()->json($error)->setStatusCode(401); }catch (\Exception $e){ $error = [ 'message' => $e->getMessage(), 'code' => 401, ]; return response()->json($error)->setStatusCode(401); } return $next($request); } }