JwtAuthMiddleware.php 2.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Closure;
  4. use Tymon\JWTAuth\Exceptions\JWTException;
  5. use Tymon\JWTAuth\Exceptions\TokenExpiredException;
  6. use Tymon\JWTAuth\Exceptions\TokenInvalidException;
  7. use Tymon\JWTAuth\Facades\JWTAuth;
  8. class JwtAuthMiddleware
  9. {
  10. /**
  11. * Handle an incoming request.
  12. *
  13. * @param \Illuminate\Http\Request $request
  14. * @param \Closure $next
  15. * @return mixed
  16. */
  17. public function handle($request, Closure $next)
  18. {
  19. try {
  20. $token = JWTAuth::getToken();
  21. if(empty($token)){
  22. $error = [
  23. 'message' => 'token is required',
  24. 'code' => 401,
  25. ];
  26. return response()->json($error);
  27. }
  28. $data = JWTAuth::decode($token)['user'];
  29. if ($data->sign !== md5($data->uid . config('customer.jwt_secret'))) {
  30. $error = [
  31. 'message' => 'request is not allow',
  32. 'code' => 401,
  33. ];
  34. return response()->json($error);
  35. }
  36. } catch (TokenExpiredException $e) {
  37. $error = [
  38. 'message' => 'Token is Expired',
  39. 'code' => 401,
  40. ];
  41. return response()->json($error)->setStatusCode(401);
  42. } catch (TokenInvalidException $e) {
  43. $error = [
  44. 'message' => $e->getMessage(),
  45. 'code' => 401,
  46. ];
  47. return response()->json($error)->setStatusCode(401);
  48. } catch (JWTException $e) {
  49. $error = [
  50. 'message' => $e->getMessage(),
  51. 'code' => 401,
  52. ];
  53. return response()->json($error)->setStatusCode(401);
  54. }catch (\Exception $e){
  55. $error = [
  56. 'message' => $e->getMessage(),
  57. 'code' => 401,
  58. ];
  59. return response()->json($error)->setStatusCode(401);
  60. }
  61. return $next($request);
  62. }
  63. }