JwtAuthMiddleware.php 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Closure;
  4. use Tymon\JWTAuth\Exceptions\JWTException;
  5. use Tymon\JWTAuth\Exceptions\TokenExpiredException;
  6. use Tymon\JWTAuth\Exceptions\TokenInvalidException;
  7. use Tymon\JWTAuth\Facades\JWTAuth;
  8. class JwtAuthMiddleware
  9. {
  10. /**
  11. * Handle an incoming request.
  12. *
  13. * @param \Illuminate\Http\Request $request
  14. * @param \Closure $next
  15. * @return mixed
  16. */
  17. public function handle($request, Closure $next)
  18. {
  19. try {
  20. $token = JWTAuth::getToken();
  21. $data = JWTAuth::decode($token);
  22. if ($data->sign !== md5($data->uid . env('JWT_SECRET'))) {
  23. $error = [
  24. 'message' => 'request is not allow',
  25. 'code' => 401,
  26. ];
  27. return response()->json($error);
  28. }
  29. } catch (TokenExpiredException $e) {
  30. $error = [
  31. 'message' => 'Token is Expired',
  32. 'code' => 401,
  33. ];
  34. return response()->json($error)->setStatusCode(401);
  35. } catch (TokenInvalidException $e) {
  36. $error = [
  37. 'message' => $e->getMessage(),
  38. 'code' => 401,
  39. ];
  40. return response()->json($error)->setStatusCode(401);
  41. } catch (JWTException $e) {
  42. $error = [
  43. 'message' => $e->getMessage(),
  44. 'code' => 401,
  45. ];
  46. return response()->json($error)->setStatusCode(401);
  47. }catch (\Exception $e){
  48. $error = [
  49. 'message' => $e->getMessage(),
  50. 'code' => 401,
  51. ];
  52. return response()->json($error)->setStatusCode(401);
  53. }
  54. return $next($request);
  55. }
  56. }