feat: Implement refresh token system for client authentication, including token creation, rotation, and revocation.
This commit is contained in:
pbao9
@@ -8,6 +8,7 @@ use App\Http\Requests\Api\Client\ClientRegisterRequest;
|
||||
use App\Http\Requests\Api\Client\ClientUpdateRequest;
|
||||
use App\Http\Resources\Api\Client\ClientResource;
|
||||
use App\Services\Api\Client\ClientAuthService;
|
||||
use Illuminate\Http\Request;
|
||||
use Tymon\JWTAuth\Facades\JWTAuth;
|
||||
use Tymon\JWTAuth\Exceptions\JWTException;
|
||||
|
||||
@@ -97,7 +98,7 @@ class ClientController extends Controller
|
||||
* operationId="clientLogin",
|
||||
* tags={"Client Authentication"},
|
||||
* summary="Client login",
|
||||
* description="Authenticate a client and return access token",
|
||||
* description="Authenticate a client and return access token + refresh token",
|
||||
* @OA\RequestBody(
|
||||
* required=true,
|
||||
* @OA\JsonContent(
|
||||
@@ -113,7 +114,9 @@ class ClientController extends Controller
|
||||
* @OA\Property(property="error", type="boolean", example=false),
|
||||
* @OA\Property(property="data", type="object",
|
||||
* @OA\Property(property="client", type="object"),
|
||||
* @OA\Property(property="token", type="string", example="1|laravel_sanctum_token...")
|
||||
* @OA\Property(property="token", type="string", example="eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."),
|
||||
* @OA\Property(property="refresh_token", type="string", example="random64charstring..."),
|
||||
* @OA\Property(property="expires_in", type="integer", example=900)
|
||||
* )
|
||||
* )
|
||||
* ),
|
||||
@@ -130,8 +133,10 @@ class ClientController extends Controller
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'data' => [
|
||||
'client' => new ClientResource($result['client']),
|
||||
'token' => $result['token'],
|
||||
'client' => new ClientResource($result['client']),
|
||||
'token' => $result['token'],
|
||||
'refresh_token' => $result['refresh_token'],
|
||||
'expires_in' => config('jwt.ttl', 60) * 60, // seconds
|
||||
],
|
||||
]);
|
||||
}
|
||||
@@ -161,7 +166,9 @@ class ClientController extends Controller
|
||||
* @OA\Property(property="error", type="boolean", example=false),
|
||||
* @OA\Property(property="data", type="object",
|
||||
* @OA\Property(property="client", type="object"),
|
||||
* @OA\Property(property="token", type="string", example="1|laravel_sanctum_token...")
|
||||
* @OA\Property(property="token", type="string", example="eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."),
|
||||
* @OA\Property(property="refresh_token", type="string", example="random64charstring..."),
|
||||
* @OA\Property(property="expires_in", type="integer", example=900)
|
||||
* )
|
||||
* )
|
||||
* ),
|
||||
@@ -178,8 +185,10 @@ class ClientController extends Controller
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'data' => [
|
||||
'client' => new ClientResource($result['client']),
|
||||
'token' => $result['token'],
|
||||
'client' => new ClientResource($result['client']),
|
||||
'token' => $result['token'],
|
||||
'refresh_token' => $result['refresh_token'],
|
||||
'expires_in' => config('jwt.ttl', 60) * 60,
|
||||
],
|
||||
]);
|
||||
}
|
||||
@@ -190,8 +199,13 @@ class ClientController extends Controller
|
||||
* operationId="clientLogout",
|
||||
* tags={"Client Authentication"},
|
||||
* summary="Client logout",
|
||||
* description="Logout the currently authenticated client",
|
||||
* description="Logout the currently authenticated client and revoke refresh token",
|
||||
* security={{"bearerAuth":{}}},
|
||||
* @OA\RequestBody(
|
||||
* @OA\JsonContent(
|
||||
* @OA\Property(property="refresh_token", type="string", example="random64charstring...")
|
||||
* )
|
||||
* ),
|
||||
* @OA\Response(
|
||||
* response=200,
|
||||
* description="Logout successful",
|
||||
@@ -206,50 +220,92 @@ class ClientController extends Controller
|
||||
* )
|
||||
* )
|
||||
*/
|
||||
public function logout()
|
||||
public function logout(Request $request)
|
||||
{
|
||||
if ($rawToken = $request->input('refresh_token')) {
|
||||
$this->authService->revokeRefreshToken($rawToken);
|
||||
}
|
||||
|
||||
auth('client')->logout();
|
||||
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'error' => false,
|
||||
'message' => 'Đã đăng xuất thành công.',
|
||||
]);
|
||||
}
|
||||
|
||||
/**
|
||||
* @OA\Post(
|
||||
* path="/client/refresh",
|
||||
* operationId="clientRefresh",
|
||||
* tags={"Client Authentication"},
|
||||
* summary="Refresh access token",
|
||||
* description="Exchange a valid refresh token for a new access token + rotated refresh token",
|
||||
* @OA\RequestBody(
|
||||
* required=true,
|
||||
* @OA\JsonContent(
|
||||
* required={"refresh_token"},
|
||||
* @OA\Property(property="refresh_token", type="string", example="random64charstring...")
|
||||
* )
|
||||
* ),
|
||||
* @OA\Response(
|
||||
* response=200,
|
||||
* description="Token refreshed",
|
||||
* @OA\JsonContent(
|
||||
* @OA\Property(property="error", type="boolean", example=false),
|
||||
* @OA\Property(property="data", type="object",
|
||||
* @OA\Property(property="token", type="string"),
|
||||
* @OA\Property(property="refresh_token", type="string"),
|
||||
* @OA\Property(property="expires_in", type="integer", example=900),
|
||||
* @OA\Property(property="client", type="object")
|
||||
* )
|
||||
* )
|
||||
* ),
|
||||
* @OA\Response(
|
||||
* response=401,
|
||||
* description="Invalid or expired refresh token"
|
||||
* )
|
||||
* )
|
||||
*/
|
||||
public function refresh(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'refresh_token' => ['required', 'string'],
|
||||
]);
|
||||
|
||||
try {
|
||||
$result = $this->authService->rotateRefreshToken($request->input('refresh_token'));
|
||||
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'data' => [
|
||||
'token' => $result['token'],
|
||||
'refresh_token' => $result['refresh_token'],
|
||||
'expires_in' => config('jwt.ttl', 60) * 60,
|
||||
'client' => new ClientResource($result['client']),
|
||||
],
|
||||
]);
|
||||
} catch (\Illuminate\Validation\ValidationException $e) {
|
||||
return response()->json([
|
||||
'error' => true,
|
||||
'message' => collect($e->errors())->flatten()->first(),
|
||||
], 401);
|
||||
}
|
||||
}
|
||||
|
||||
public function update(ClientUpdateRequest $request)
|
||||
{
|
||||
$user = auth('client')->user();
|
||||
|
||||
|
||||
$user->fill($request->validated());
|
||||
$user->save();
|
||||
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'error' => false,
|
||||
'message' => 'Cập nhật thông tin thành công',
|
||||
'data' => [
|
||||
'data' => [
|
||||
'client' => new ClientResource($user),
|
||||
],
|
||||
]);
|
||||
}
|
||||
|
||||
public function refresh()
|
||||
{
|
||||
try {
|
||||
$newToken = JWTAuth::parseToken()->refresh();
|
||||
$user = JWTAuth::setToken($newToken)->toUser();
|
||||
|
||||
return response()->json([
|
||||
'error' => false,
|
||||
'data' => [
|
||||
'token' => $newToken,
|
||||
'client' => new ClientResource($user),
|
||||
],
|
||||
]);
|
||||
} catch (JWTException $e) {
|
||||
return response()->json([
|
||||
'error' => true,
|
||||
'message' => 'Không thể làm mới phiên đăng nhập. Vui lòng đăng nhập lại.',
|
||||
], 401);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user