Use FreshApiToken instead of Personal access token for front-end auth

This commit is contained in:
Bubka
2021-10-22 14:18:13 +02:00
parent 62d223ef72
commit d6306e5dd0
12 changed files with 65 additions and 60 deletions

View File

@@ -69,8 +69,7 @@ class LoginController extends Controller
*/
public function logout(Request $request)
{
$accessToken = Auth::user()->token();
$accessToken->revoke();
Auth::logout();
return response()->json(['message' => 'signed out'], Response::HTTP_OK);
}
@@ -86,14 +85,12 @@ class LoginController extends Controller
{
$this->clearLoginAttempts($request);
$success['token'] = $this->guard()->user()->createToken('2FAuth')->accessToken;
$success['name'] = $this->guard()->user()->name;
$this->authenticated($request, $this->guard()->user());
return response()->json([
'message' => 'authenticated',
'token' => $success['token'],
'name' => $success['name']
], Response::HTTP_OK);
}

View File

@@ -4,14 +4,10 @@ namespace App\Http\Controllers\Auth;
use App\User;
use App\Http\Requests\UserStoreRequest;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use App\Http\Controllers\Controller;
use Illuminate\Support\Facades\Hash;
use Illuminate\Auth\Events\Registered;
use Illuminate\Support\Facades\Validator;
use Illuminate\Foundation\Auth\RegistersUsers;
use Illuminate\Validation\ValidationException;
class RegisterController extends Controller
{
@@ -40,9 +36,10 @@ class RegisterController extends Controller
$validated = $request->validated();
event(new Registered($user = $this->create($validated)));
$this->attemptLogin($request);
return response()->json([
'message' => 'account created',
'token' => $user->createToken('2FAuth')->accessToken,
'name' => $user->name,
], 201);
}