php - Laravel Passport 通过访问 token 获取客户端 ID

Question

我正在编写一个小型短信网关，供几个项目使用，

我实现了 laravel 护照认证(client credentials grant token)

然后我将 CheckClientCredentials 添加到 api 中间件组:

protected $middlewareGroups = [
    'web' => [
       ...
    ],

    'api' => [
        'throttle:60,1',
        'bindings',
        \Laravel\Passport\Http\Middleware\CheckClientCredentials::class
    ],
];

逻辑工作正常，现在在我的 Controller 中我需要让客户端与有效 token 相关联。

routes.php

Route::post('/sms', function(Request $request) {
    // save the sms along with the client id and send it

    $client_id = ''; // get the client id somehow

    sendSms($request->text, $request->to, $client_id);
});

出于明显的安全原因，我永远无法将客户端 ID 与消费者请求一起发送，例如$client_id = $request->client_id;。

Answer 1

我用它来访问经过身份验证的客户端应用程序...

$bearerToken = $request->bearerToken();
$tokenId = (new \Lcobucci\JWT\Parser())->parse($bearerToken)->getHeader('jti');
$client = \Laravel\Passport\Token::find($tokenId)->client;

$client_id = $client->id;
$client_secret = $client->secret;

Source