How to return json response in AuthServiceProvider?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.



I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?



Is AuthServiceProvider.php (below is my current code) a good place for decoding token?



<?php

namespace AppProviders;

use AppUser;
use IlluminateSupportServiceProvider;
use FirebaseJWTJWT;
use FirebaseJWTExpiredException;
use Exception;

class AuthServiceProvider extends ServiceProvider
{
/**
* Boot the authentication services for the application.
*
* @return void
*/
public function boot()
{
// Here you may define how you wish users to be authenticated for your Lumen
// application. The callback which receives the incoming request instance
// should return either a User instance or null. You're free to obtain
// the User instance via an API token or any other method necessary.

$this->app['auth']->viaRequest('api', function ($request) {
$token = $request->bearerToken();

if(!$token) {
// Unauthorized response if token not there
throw new Exception('token not provided');
}

try {
$credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
} catch(ExpiredException $e) {
return response()->json([
'error' => 'token expired'
], 400);
} catch(Exception $e) {
return response()->json([
'error' => 'token error'
], 400);
}

return User::find($credentials->sub);
});
}
}









share|improve this question





























    0















    I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.



    I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?



    Is AuthServiceProvider.php (below is my current code) a good place for decoding token?



    <?php

    namespace AppProviders;

    use AppUser;
    use IlluminateSupportServiceProvider;
    use FirebaseJWTJWT;
    use FirebaseJWTExpiredException;
    use Exception;

    class AuthServiceProvider extends ServiceProvider
    {
    /**
    * Boot the authentication services for the application.
    *
    * @return void
    */
    public function boot()
    {
    // Here you may define how you wish users to be authenticated for your Lumen
    // application. The callback which receives the incoming request instance
    // should return either a User instance or null. You're free to obtain
    // the User instance via an API token or any other method necessary.

    $this->app['auth']->viaRequest('api', function ($request) {
    $token = $request->bearerToken();

    if(!$token) {
    // Unauthorized response if token not there
    throw new Exception('token not provided');
    }

    try {
    $credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
    } catch(ExpiredException $e) {
    return response()->json([
    'error' => 'token expired'
    ], 400);
    } catch(Exception $e) {
    return response()->json([
    'error' => 'token error'
    ], 400);
    }

    return User::find($credentials->sub);
    });
    }
    }









    share|improve this question

























      0












      0








      0








      I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.



      I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?



      Is AuthServiceProvider.php (below is my current code) a good place for decoding token?



      <?php

      namespace AppProviders;

      use AppUser;
      use IlluminateSupportServiceProvider;
      use FirebaseJWTJWT;
      use FirebaseJWTExpiredException;
      use Exception;

      class AuthServiceProvider extends ServiceProvider
      {
      /**
      * Boot the authentication services for the application.
      *
      * @return void
      */
      public function boot()
      {
      // Here you may define how you wish users to be authenticated for your Lumen
      // application. The callback which receives the incoming request instance
      // should return either a User instance or null. You're free to obtain
      // the User instance via an API token or any other method necessary.

      $this->app['auth']->viaRequest('api', function ($request) {
      $token = $request->bearerToken();

      if(!$token) {
      // Unauthorized response if token not there
      throw new Exception('token not provided');
      }

      try {
      $credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
      } catch(ExpiredException $e) {
      return response()->json([
      'error' => 'token expired'
      ], 400);
      } catch(Exception $e) {
      return response()->json([
      'error' => 'token error'
      ], 400);
      }

      return User::find($credentials->sub);
      });
      }
      }









      share|improve this question














      I'm using Firebase JWT in my Lumen project and i'm not sure about returning custom json response when token is invalid. I'm using default Authenticate.php middleware.



      I don't know if i should use middlewares or exceptions like that throw new Exception('token not provided');?



      Is AuthServiceProvider.php (below is my current code) a good place for decoding token?



      <?php

      namespace AppProviders;

      use AppUser;
      use IlluminateSupportServiceProvider;
      use FirebaseJWTJWT;
      use FirebaseJWTExpiredException;
      use Exception;

      class AuthServiceProvider extends ServiceProvider
      {
      /**
      * Boot the authentication services for the application.
      *
      * @return void
      */
      public function boot()
      {
      // Here you may define how you wish users to be authenticated for your Lumen
      // application. The callback which receives the incoming request instance
      // should return either a User instance or null. You're free to obtain
      // the User instance via an API token or any other method necessary.

      $this->app['auth']->viaRequest('api', function ($request) {
      $token = $request->bearerToken();

      if(!$token) {
      // Unauthorized response if token not there
      throw new Exception('token not provided');
      }

      try {
      $credentials = JWT::decode($token, env('JWT_SECRET'), ['HS256']);
      } catch(ExpiredException $e) {
      return response()->json([
      'error' => 'token expired'
      ], 400);
      } catch(Exception $e) {
      return response()->json([
      'error' => 'token error'
      ], 400);
      }

      return User::find($credentials->sub);
      });
      }
      }






      php rest authentication jwt lumen






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 23 '18 at 17:36









      haferhafer

      2717




      2717
























          0






          active

          oldest

          votes












          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53450942%2fhow-to-return-json-response-in-authserviceprovider%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53450942%2fhow-to-return-json-response-in-authserviceprovider%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          "Incorrect syntax near the keyword 'ON'. (on update cascade, on delete cascade,)

          Alcedinidae

          Origin of the phrase “under your belt”?