填坑记录：laravel passport与手机短信登录结合

if ($innerVerificationCode==$verificationCode) {   //验证码成功成功，判断是由在数据库中有此手机用户，有立即给他token 没有 创建后给他token   $user=User::query()->where('phone_number', $phoneNumber)->first();  if (!$user) {   $user = new User();   $user->name = $phoneNumber;   $user->phone_number= $phoneNumber;   $user->login_type=User::USER_LOGIN_TYPE_PHONE;   $user->password = bcrypt('12345678');   $user->save();   }   return $this->getToken($user, 'id'); } // 原本一直在纠结如何不用账号密码直接给他 access_token 但是种种原因不是失败了吗 那就 api 请求下 public function getToken($user, $type)     {         $http = new GuzzleHttpClient();         $response = $http->post(config('app.url').'/api/fund/oauth/token', [             'form_params' => [                 'grant_type' => 'password',                 'username' => $user->$type,//用户可以直接登录的用户名，配置后也可以是邮箱，5.8版本，这个默认是注册后的邮箱                 'password' => '12345678',//用户名对应的密码                 'scope' => '*',             ],         ]);         return  json_decode($response->getBody(), false);     }

<?php namespace AppHttpControllersApi; use IlluminateSupportFacadesAuth; use IlluminateSupportFacadesDB; use IlluminateSupportFacadesHash; use PsrHttpMessageServerRequestInterface; use SymfonyComponentHttpKernelExceptionUnauthorizedHttpException; use Validator; class AccessTokenController extends LaravelPassportHttpControllersAccessTokenController {     /**      * Show User Token      *      * 获取用户登录令牌信息      *      * @bodyParam username string required 用户名 Example: admin@localhost.com      * @bodyParam password string required 密码 Example: 123456      * @bodyParam is_register boolean  是否为注册操作 Example: true      * @bodyParam subscribe boolean  订阅状态 Example: true      * @bodyParam grant_type string 授权类型默认password No-example      * @bodyParam scope string 授权范围默认* No-example      * @responseFile responses/AccessToken.List.example2.json      */     public function issueToken(ServerRequestInterface $rawRequest)     {         //获取传入参数         $request = collect($rawRequest->getParsedBody());         $validator = Validator::make($request-&gt;all(), [             'username' =&gt; 'required',             'password' =&gt; 'required',         ])-&gt;validate();         $checkUser = AppModelsUser::where("id", $request-&gt;get("username"))-&gt;first();         if (!Hash::check($request-&gt;get("password"), $checkUser-&gt;password)) {             throw new UnauthorizedHttpException('Unauthenticated', "login failed,username error or password error");         }         $oauthClient = DB::table('oauth_clients')-&gt;where("password_client", 1)-&gt;first();         if (empty($oauthClient)) {             throw new ErrorException('can not get oauth client information');         }         //获取其他参数         $addRequest = [             'grant_type' =&gt; $request-&gt;get("grant_type", "password"),             'client_id' =&gt; $request-&gt;get("client_id", $oauthClient-&gt;id),             'client_secret' =&gt; $request-&gt;get("client_secret", $oauthClient-&gt;secret),             'scope' =&gt; $request-&gt;get("scope", "*"),         ];         //重写传入参数         $newRawRequest = $rawRequest-&gt;withParsedBody(array_merge($request-&gt;all(), $addRequest));         return parent::issueToken($newRawRequest);     }     /**      * revoke token      *      * 吊销令牌      *      */     public function revokeToken()     {         if(Auth::user()){             $tokenId = Auth::user()-&gt;token()-&gt;id;             $tokenRepository = app('LaravelPassportTokenRepository');             $tokenRepository-&gt;revokeAccessToken($tokenId);         }         return response('', 204);     } }

<?php namespace AppTraits; //这里请引用自己的User Model use AppModelsUsersUser; use DateTime; use GuzzleHttpPsr7Response; use IlluminateEventsDispatcher; use LaravelPassportBridgeAccessToken; use LaravelPassportBridgeAccessTokenRepository; use LaravelPassportBridgeClient; use LaravelPassportBridgeRefreshTokenRepository; use LaravelPassportBridgeScope; use LaravelPassportPassport; use LaravelPassportTokenRepository; use LeagueOAuth2ServerCryptKey; use LeagueOAuth2ServerEntitiesAccessTokenEntityInterface; use LeagueOAuth2ServerExceptionOAuthServerException; use LeagueOAuth2ServerExceptionUniqueTokenIdentifierConstraintViolationException; use LeagueOAuth2ServerResponseTypesBearerTokenResponse; /**  * Trait PassportToken  *  * @package AppTraits  */ trait PassportToken {     /**      * Generate a new unique identifier.      *      * @param int $length      *      * @throws OAuthServerException      *      * @return string      */     private function generateUniqueIdentifier($length = 40)     {         try {             return bin2hex(random_bytes($length));             // @codeCoverageIgnoreStart         } catch (TypeError $e) {             throw OAuthServerException::serverError(&#39;An unexpected error has occurred&#39;);         } catch (Error $e) {             throw OAuthServerException::serverError(&#39;An unexpected error has occurred&#39;);         } catch (Exception $e) {             // If you get this message, the CSPRNG failed hard.             throw OAuthServerException::serverError(&#39;Could not generate a random string&#39;);         }         // @codeCoverageIgnoreEnd     }     private function issueRefreshToken(AccessTokenEntityInterface $accessToken)     {         $maxGenerationAttempts = 10;         $refreshTokenRepository = app(RefreshTokenRepository::class);         $refreshToken = $refreshTokenRepository->getNewRefreshToken();         $refreshToken-&gt;setExpiryDateTime((new DateTimeImmutable())-&gt;add(Passport::refreshTokensExpireIn()));         $refreshToken-&gt;setAccessToken($accessToken);         while ($maxGenerationAttempts-- &gt; 0) {             $refreshToken-&gt;setIdentifier($this-&gt;generateUniqueIdentifier());             try {                 $refreshTokenRepository-&gt;persistNewRefreshToken($refreshToken);                 return $refreshToken;             } catch (UniqueTokenIdentifierConstraintViolationException $e) {                 if ($maxGenerationAttempts === 0) {                     throw $e;                 }             }         }     }     protected function createPassportTokenByUser(User $user, $clientId)     {         $accessTokenRepository = new AccessTokenRepository(new TokenRepository(), new Dispatcher());         $accessToken = $accessTokenRepository-&gt;getNewToken(new Client($clientId, null, null), [new Scope("*")], $user-&gt;id);         $accessToken-&gt;setIdentifier($this-&gt;generateUniqueIdentifier());         $accessToken-&gt;setClient(new Client($clientId, null, null));         $accessToken-&gt;setExpiryDateTime((new DateTimeImmutable())-&gt;add(Passport::tokensExpireIn()));         $accessTokenRepository-&gt;persistNewAccessToken($accessToken);         $refreshToken = $this-&gt;issueRefreshToken($accessToken);         return [             'access_token' =&gt; $accessToken,             'refresh_token' =&gt; $refreshToken,         ];     }     protected function sendBearerTokenResponse($accessToken, $refreshToken)     {         $response = new BearerTokenResponse();         $response-&gt;setAccessToken($accessToken);         $response-&gt;setRefreshToken($refreshToken);         $privateKey = new CryptKey('file://'.Passport::keyPath('oauth-private.key'),null,false);         $accessToken-&gt;setPrivateKey($privateKey);         $response-&gt;setPrivateKey($privateKey);         $response-&gt;setEncryptionKey(app('encrypter')-&gt;getKey());         return $response-&gt;generateHttpResponse(new Response);     }     /**      * @param User $user      * @param $clientId      * @param bool $output      * @return mixed|PsrHttpMessageResponseInterface      */     protected function getBearerTokenByUser(User $user, $clientId, $output = true)     {         $passportToken = $this-&gt;createPassportTokenByUser($user, $clientId);         $bearerToken = $this-&gt;sendBearerTokenResponse($passportToken['access_token'], $passportToken['refresh_token']);         if (! $output) {             $bearerToken = json_decode($bearerToken-&gt;getBody()-&gt;__toString(), true);         }         return $bearerToken;     } }   $user=User::find(2);         $token =  $this-&gt;getBearerTokenByUser($user,6,false);         return $token;