├── .editorconfig ├── .env.example ├── .gitattributes ├── .gitignore ├── LICENSE ├── app ├── Api │ └── Helpers │ │ ├── ApiResponse.php │ │ └── ExceptionReport.php ├── Console │ └── Kernel.php ├── Exceptions │ └── Handler.php ├── Http │ ├── Controllers │ │ ├── Api │ │ │ ├── AdminController.php │ │ │ ├── Controller.php │ │ │ └── UserController.php │ │ ├── Auth │ │ │ ├── ForgotPasswordController.php │ │ │ ├── LoginController.php │ │ │ ├── RegisterController.php │ │ │ ├── ResetPasswordController.php │ │ │ └── VerificationController.php │ │ └── Controller.php │ ├── Kernel.php │ ├── Middleware │ │ ├── Api │ │ │ ├── AdminGuardMiddleware.php │ │ │ ├── RefreshTokenMiddleware.php │ │ │ └── UserGuardMiddleware.php │ │ ├── Authenticate.php │ │ ├── CheckForMaintenanceMode.php │ │ ├── EncryptCookies.php │ │ ├── RedirectIfAuthenticated.php │ │ ├── TrimStrings.php │ │ ├── TrustProxies.php │ │ └── VerifyCsrfToken.php │ ├── Requests │ │ └── Api │ │ │ ├── AdminRequest.php │ │ │ ├── FormRequest.php │ │ │ └── UserRequest.php │ └── Resources │ │ └── Api │ │ ├── AdminResource.php │ │ └── UserResource.php ├── Jobs │ └── Api │ │ └── SaveLastTokenJob.php ├── Models │ ├── Admin.php │ ├── Book.php │ ├── Enum │ │ ├── AdminEnum.php │ │ └── UserEnum.php │ └── User.php └── Providers │ ├── AppServiceProvider.php │ ├── AuthServiceProvider.php │ ├── BroadcastServiceProvider.php │ ├── EventServiceProvider.php │ ├── HorizonServiceProvider.php │ └── RouteServiceProvider.php ├── artisan ├── bootstrap ├── app.php └── cache │ └── .gitignore ├── composer.json ├── composer.lock ├── config ├── app.php ├── auth.php ├── broadcasting.php ├── cache.php ├── cors.php ├── database.php ├── filesystems.php ├── hashing.php ├── horizon.php ├── jwt.php ├── logging.php ├── mail.php ├── queue.php ├── services.php ├── session.php └── view.php ├── database ├── .gitignore ├── factories │ └── UserFactory.php ├── migrations │ ├── 2014_10_12_000000_create_users_table.php │ └── 2019_03_01_064314_create_admins_table.php └── seeds │ └── DatabaseSeeder.php ├── package.json ├── phpunit.xml ├── public ├── .htaccess ├── css │ └── app.css ├── favicon.ico ├── index.php ├── js │ └── app.js ├── robots.txt ├── svg │ ├── 403.svg │ ├── 404.svg │ ├── 500.svg │ └── 503.svg ├── vendor │ └── horizon │ │ ├── app-dark.css │ │ ├── app.css │ │ ├── app.js │ │ ├── css │ │ ├── app.css │ │ └── app.css.map │ │ ├── img │ │ ├── favicon.png │ │ ├── horizon.svg │ │ └── sprite.svg │ │ ├── js │ │ ├── app.js │ │ └── app.js.map │ │ └── mix-manifest.json └── web.config ├── readme.md ├── resources ├── js │ ├── app.js │ ├── bootstrap.js │ └── components │ │ └── ExampleComponent.vue ├── lang │ └── en │ │ ├── auth.php │ │ ├── pagination.php │ │ ├── passwords.php │ │ └── validation.php ├── sass │ ├── _variables.scss │ └── app.scss └── views │ └── welcome.blade.php ├── routes ├── api.php ├── channels.php ├── console.php └── web.php ├── server.php ├── storage ├── app │ ├── .gitignore │ └── public │ │ └── .gitignore ├── framework │ ├── .gitignore │ ├── cache │ │ ├── .gitignore │ │ └── data │ │ │ └── .gitignore │ ├── sessions │ │ └── .gitignore │ ├── testing │ │ └── .gitignore │ └── views │ │ └── .gitignore └── logs │ └── .gitignore ├── tests ├── CreatesApplication.php ├── Feature │ └── ExampleTest.php ├── TestCase.php └── Unit │ └── ExampleTest.php └── webpack.mix.js /.editorconfig: -------------------------------------------------------------------------------- 1 | root = true 2 | 3 | [*] 4 | charset = utf-8 5 | end_of_line = lf 6 | insert_final_newline = true 7 | indent_style = space 8 | indent_size = 4 9 | trim_trailing_whitespace = true 10 | 11 | [*.md] 12 | trim_trailing_whitespace = false 13 | 14 | [*.yml] 15 | indent_size = 2 16 | -------------------------------------------------------------------------------- /.env.example: -------------------------------------------------------------------------------- 1 | APP_NAME=Laravel 2 | APP_ENV=local 3 | APP_KEY= 4 | APP_DEBUG=true 5 | APP_URL=http://localhost 6 | 7 | LOG_CHANNEL=stack 8 | 9 | DB_CONNECTION=mysql 10 | DB_HOST=127.0.0.1 11 | DB_PORT=3306 12 | DB_DATABASE=homestead 13 | DB_USERNAME=homestead 14 | DB_PASSWORD=secret 15 | 16 | BROADCAST_DRIVER=log 17 | CACHE_DRIVER=file 18 | QUEUE_CONNECTION=redis 19 | SESSION_DRIVER=file 20 | SESSION_LIFETIME=120 21 | 22 | REDIS_HOST=127.0.0.1 23 | REDIS_PASSWORD=null 24 | REDIS_PORT=6379 25 | 26 | MAIL_DRIVER=smtp 27 | MAIL_HOST=smtp.mailtrap.io 28 | MAIL_PORT=2525 29 | MAIL_USERNAME=null 30 | MAIL_PASSWORD=null 31 | MAIL_ENCRYPTION=null 32 | 33 | PUSHER_APP_ID= 34 | PUSHER_APP_KEY= 35 | PUSHER_APP_SECRET= 36 | PUSHER_APP_CLUSTER=mt1 37 | 38 | MIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}" 39 | MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}" 40 | 41 | HORIZON_IP=127.0.0.1 -------------------------------------------------------------------------------- /.gitattributes: -------------------------------------------------------------------------------- 1 | * text=auto 2 | *.css linguist-vendored 3 | *.scss linguist-vendored 4 | *.js linguist-vendored 5 | CHANGELOG.md export-ignore 6 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | /node_modules 2 | /public/hot 3 | /public/storage 4 | /storage/*.key 5 | /vendor 6 | .env 7 | .phpunit.result.cache 8 | Homestead.json 9 | Homestead.yaml 10 | npm-debug.log 11 | yarn-error.log 12 | /.idea 13 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2020 guaosi 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /app/Api/Helpers/ApiResponse.php: -------------------------------------------------------------------------------- 1 | statusCode; 19 | } 20 | 21 | /** 22 | * @param $statusCode 23 | * @return $this 24 | */ 25 | public function setStatusCode($statusCode,$httpCode=null) 26 | { 27 | $httpCode = $httpCode ?? $statusCode; 28 | $this->statusCode = $statusCode; 29 | return $this; 30 | } 31 | 32 | /** 33 | * @param $data 34 | * @param array $header 35 | * @return mixed 36 | */ 37 | public function respond($data, $header = []) 38 | { 39 | 40 | return Response::json($data,$this->getStatusCode(),$header); 41 | } 42 | 43 | /** 44 | * @param $status 45 | * @param array $data 46 | * @param null $code 47 | * @return mixed 48 | */ 49 | public function status($status, array $data, $code = null){ 50 | 51 | if ($code){ 52 | $this->setStatusCode($code); 53 | } 54 | $status = [ 55 | 'status' => $status, 56 | 'code' => $this->statusCode 57 | ]; 58 | 59 | $data = array_merge($status,$data); 60 | return $this->respond($data); 61 | 62 | } 63 | 64 | /** 65 | * @param $message 66 | * @param int $code 67 | * @param string $status 68 | * @return mixed 69 | */ 70 | /* 71 | * 格式 72 | * data: 73 | * code:422 74 | * message:xxx 75 | * status:'error' 76 | */ 77 | public function failed($message, $code = FoundationResponse::HTTP_BAD_REQUEST,$status = 'error'){ 78 | 79 | return $this->setStatusCode($code)->message($message,$status); 80 | } 81 | 82 | /** 83 | * @param $message 84 | * @param string $status 85 | * @return mixed 86 | */ 87 | public function message($message, $status = "success"){ 88 | 89 | return $this->status($status,[ 90 | 'message' => $message 91 | ]); 92 | } 93 | 94 | /** 95 | * @param string $message 96 | * @return mixed 97 | */ 98 | public function internalError($message = "Internal Error!"){ 99 | 100 | return $this->failed($message,FoundationResponse::HTTP_INTERNAL_SERVER_ERROR); 101 | } 102 | 103 | /** 104 | * @param string $message 105 | * @return mixed 106 | */ 107 | public function created($message = "created") 108 | { 109 | return $this->setStatusCode(FoundationResponse::HTTP_CREATED) 110 | ->message($message); 111 | 112 | } 113 | 114 | /** 115 | * @param $data 116 | * @param string $status 117 | * @return mixed 118 | */ 119 | public function success($data, $status = "success"){ 120 | 121 | return $this->status($status,compact('data')); 122 | } 123 | 124 | /** 125 | * @param string $message 126 | * @return mixed 127 | */ 128 | public function notFond($message = 'Not Fond!') 129 | { 130 | return $this->failed($message,Foundationresponse::HTTP_NOT_FOUND); 131 | } 132 | 133 | } -------------------------------------------------------------------------------- /app/Api/Helpers/ExceptionReport.php: -------------------------------------------------------------------------------- 1 | request = $request; 43 | $this->exception = $exception; 44 | } 45 | 46 | /** 47 | * @var array 48 | */ 49 | //当抛出这些异常时，可以使用我们定义的错误信息与HTTP状态码 50 | //可以把常见异常放在这里 51 | public $doReport = [ 52 | AuthenticationException::class => ['未授权',401], 53 | ModelNotFoundException::class => ['该模型未找到',404], 54 | AuthorizationException::class => ['没有此权限',403], 55 | ValidationException::class => [], 56 | UnauthorizedHttpException::class=>['未登录或登录状态失效',422], 57 | TokenInvalidException::class=>['token不正确',400], 58 | NotFoundHttpException::class=>['没有找到该页面',404], 59 | MethodNotAllowedHttpException::class=>['访问方式不正确',405], 60 | QueryException::class=>['参数错误',401], 61 | ]; 62 | 63 | public function register($className,callable $callback){ 64 | 65 | $this->doReport[$className] = $callback; 66 | } 67 | 68 | /** 69 | * @return bool 70 | */ 71 | public function shouldReturn(){ 72 | //只有请求包含是json或者ajax请求时才有效 73 | // if (! ($this->request->wantsJson() || $this->request->ajax())){ 74 | // 75 | // return false; 76 | // } 77 | foreach (array_keys($this->doReport) as $report){ 78 | if ($this->exception instanceof $report){ 79 | $this->report = $report; 80 | return true; 81 | } 82 | } 83 | 84 | return false; 85 | 86 | } 87 | 88 | /** 89 | * @param Exception $e 90 | * @return static 91 | */ 92 | public static function make(Exception $e){ 93 | 94 | return new static(\request(),$e); 95 | } 96 | 97 | /** 98 | * @return mixed 99 | */ 100 | public function report(){ 101 | if ($this->exception instanceof ValidationException){ 102 | $error = array_first($this->exception->errors()); 103 | return $this->failed(array_first($error),$this->exception->status); 104 | } 105 | $message = $this->doReport[$this->report]; 106 | return $this->failed($message[0],$message[1]); 107 | } 108 | public function prodReport(){ 109 | return $this->failed('服务器错误','500'); 110 | } 111 | } -------------------------------------------------------------------------------- /app/Console/Kernel.php: -------------------------------------------------------------------------------- 1 | command('inspire') 28 | // ->hourly(); 29 | } 30 | 31 | /** 32 | * Register the commands for the application. 33 | * 34 | * @return void 35 | */ 36 | protected function commands() 37 | { 38 | $this->load(__DIR__.'/Commands'); 39 | 40 | require base_path('routes/console.php'); 41 | } 42 | } 43 | -------------------------------------------------------------------------------- /app/Exceptions/Handler.php: -------------------------------------------------------------------------------- 1 | ajax()){ 38 | // 将方法拦截到自己的ExceptionReport 39 | $reporter = ExceptionReport::make($exception); 40 | if ($reporter->shouldReturn()){ 41 | return $reporter->report(); 42 | } 43 | if(env('APP_DEBUG')){ 44 | //开发环境，则显示详细错误信息 45 | return parent::render($request, $exception); 46 | }else{ 47 | //线上环境,未知错误，则显示500 48 | return $reporter->prodReport(); 49 | } 50 | } 51 | return parent::render($request, $exception); 52 | } 53 | } 54 | -------------------------------------------------------------------------------- /app/Http/Controllers/Api/AdminController.php: -------------------------------------------------------------------------------- 1 | success(new AdminResource($admin)); 28 | } 29 | 30 | //返回当前登录用户信息 31 | public function info() 32 | { 33 | $admins = Auth::user(); 34 | return $this->success(new AdminResource($admins)); 35 | } 36 | 37 | //用户注册 38 | public function store(UserRequest $request) 39 | { 40 | Admin::create($request->all()); 41 | return $this->setStatusCode(201)->success('用户注册成功'); 42 | } 43 | 44 | //用户登录 45 | public function login(Request $request) 46 | { 47 | //获取当前守护的名称 48 | $present_guard = Auth::getDefaultDriver(); 49 | $token = Auth::claims(['guard'=>$present_guard])->attempt(['name' => $request->name, 'password' => $request->password]); 50 | if ($token) { 51 | //如果登陆，先检查原先是否有存token，有的话先失效，然后再存入最新的token 52 | $user = Auth::user(); 53 | if ($user->last_token) { 54 | try{ 55 | Auth::setToken($user->last_token)->invalidate(); 56 | }catch (TokenExpiredException $e){ 57 | //因为让一个过期的token再失效，会抛出异常，所以我们捕捉异常，不需要做任何处理 58 | } 59 | } 60 | SaveLastTokenJob::dispatch($user,$token); 61 | return $this->setStatusCode(201)->success(['token' => 'bearer ' . $token]); 62 | } 63 | return $this->failed('账号或密码错误', 400); 64 | } 65 | 66 | //用户退出 67 | public function logout() 68 | { 69 | Auth::logout(); 70 | return $this->success('退出成功...'); 71 | } 72 | } 73 | -------------------------------------------------------------------------------- /app/Http/Controllers/Api/Controller.php: -------------------------------------------------------------------------------- 1 | success(new UserResource($user)); 26 | } 27 | //返回当前登录用户信息 28 | public function info(){ 29 | $user = Auth::user(); 30 | return $this->success(new UserResource($user)); 31 | } 32 | //用户注册 33 | public function store(UserRequest $request){ 34 | User::create($request->all()); 35 | return $this->setStatusCode(201)->success('用户注册成功'); 36 | } 37 | //用户登录 38 | public function login(Request $request){ 39 | $token=Auth::claims(['guard'=>'api'])->attempt(['name'=>$request->name,'password'=>$request->password]); 40 | if($token) { 41 | //如果登陆，先检查原先是否有存token，有的话先失效，然后再存入最新的token 42 | $user = Auth::user(); 43 | if($user->last_token){ 44 | try{ 45 | Auth::setToken($user->last_token)->invalidate(); 46 | }catch (TokenExpiredException $e){ 47 | //因为让一个过期的token再失效，会抛出异常，所以我们捕捉异常，不需要做任何处理 48 | } 49 | } 50 | SaveLastTokenJob::dispatch($user,$token); 51 | 52 | return $this->setStatusCode(201)->success(['token' => 'bearer ' . $token]); 53 | } 54 | return $this->failed('账号或密码错误',400); 55 | } 56 | //用户退出 57 | public function logout(){ 58 | Auth::logout(); 59 | return $this->success('退出成功...'); 60 | } 61 | } 62 | -------------------------------------------------------------------------------- /app/Http/Controllers/Auth/ForgotPasswordController.php: -------------------------------------------------------------------------------- 1 | middleware('guest'); 31 | } 32 | } 33 | -------------------------------------------------------------------------------- /app/Http/Controllers/Auth/LoginController.php: -------------------------------------------------------------------------------- 1 | middleware('guest')->except('logout'); 38 | } 39 | public function username() 40 | { 41 | return 'name'; 42 | } 43 | } 44 | -------------------------------------------------------------------------------- /app/Http/Controllers/Auth/RegisterController.php: -------------------------------------------------------------------------------- 1 | middleware('guest'); 41 | } 42 | 43 | /** 44 | * Get a validator for an incoming registration request. 45 | * 46 | * @param array $data 47 | * @return \Illuminate\Contracts\Validation\Validator 48 | */ 49 | protected function validator(array $data) 50 | { 51 | return Validator::make($data, [ 52 | 'name' => ['required', 'string', 'max:255'], 53 | 'email' => ['required', 'string', 'email', 'max:255', 'unique:users'], 54 | 'password' => ['required', 'string', 'min:6', 'confirmed'], 55 | ]); 56 | } 57 | 58 | /** 59 | * Create a new user instance after a valid registration. 60 | * 61 | * @param array $data 62 | * @return \App\Models\User 63 | */ 64 | protected function create(array $data) 65 | { 66 | return User::create([ 67 | 'name' => $data['name'], 68 | 'email' => $data['email'], 69 | 'password' => Hash::make($data['password']), 70 | ]); 71 | } 72 | } 73 | -------------------------------------------------------------------------------- /app/Http/Controllers/Auth/ResetPasswordController.php: -------------------------------------------------------------------------------- 1 | middleware('guest'); 38 | } 39 | } 40 | -------------------------------------------------------------------------------- /app/Http/Controllers/Auth/VerificationController.php: -------------------------------------------------------------------------------- 1 | middleware('auth'); 38 | $this->middleware('signed')->only('verify'); 39 | $this->middleware('throttle:6,1')->only('verify', 'resend'); 40 | } 41 | } 42 | -------------------------------------------------------------------------------- /app/Http/Controllers/Controller.php: -------------------------------------------------------------------------------- 1 | [ 31 | \App\Http\Middleware\EncryptCookies::class, 32 | \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class, 33 | \Illuminate\Session\Middleware\StartSession::class, 34 | // \Illuminate\Session\Middleware\AuthenticateSession::class, 35 | \Illuminate\View\Middleware\ShareErrorsFromSession::class, 36 | \App\Http\Middleware\VerifyCsrfToken::class, 37 | \Illuminate\Routing\Middleware\SubstituteBindings::class, 38 | ], 39 | 40 | 'api' => [ 41 | 'throttle:60,1', 42 | 'bindings', 43 | ], 44 | ]; 45 | 46 | /** 47 | * The application's route middleware. 48 | * 49 | * These middleware may be assigned to groups or used individually. 50 | * 51 | * @var array 52 | */ 53 | protected $routeMiddleware = [ 54 | 'auth' => \App\Http\Middleware\Authenticate::class, 55 | 'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class, 56 | 'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class, 57 | 'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class, 58 | 'can' => \Illuminate\Auth\Middleware\Authorize::class, 59 | 'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class, 60 | 'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class, 61 | 'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class, 62 | 'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class, 63 | 'cors'=> \Medz\Cors\Laravel\Middleware\ShouldGroup::class, 64 | 'api.refresh'=>\App\Http\Middleware\Api\RefreshTokenMiddleware::class, 65 | 'admin.refresh'=>\App\Http\Middleware\Api\RefreshAdminTokenMiddleware::class, 66 | 'admin.guard'=>\App\Http\Middleware\Api\AdminGuardMiddleware::class, 67 | 'api.guard'=>\App\Http\Middleware\Api\UserGuardMiddleware::class, 68 | ]; 69 | 70 | /** 71 | * The priority-sorted list of middleware. 72 | * 73 | * This forces non-global middleware to always be in the given order. 74 | * 75 | * @var array 76 | */ 77 | protected $middlewarePriority = [ 78 | \Illuminate\Session\Middleware\StartSession::class, 79 | \Illuminate\View\Middleware\ShareErrorsFromSession::class, 80 | \App\Http\Middleware\Authenticate::class, 81 | \Illuminate\Session\Middleware\AuthenticateSession::class, 82 | \Illuminate\Routing\Middleware\SubstituteBindings::class, 83 | \Illuminate\Auth\Middleware\Authorize::class, 84 | ]; 85 | } 86 | -------------------------------------------------------------------------------- /app/Http/Middleware/Api/AdminGuardMiddleware.php: -------------------------------------------------------------------------------- 1 | 'admin']); 20 | return $next($request); 21 | } 22 | } -------------------------------------------------------------------------------- /app/Http/Middleware/Api/RefreshTokenMiddleware.php: -------------------------------------------------------------------------------- 1 | checkForToken($request); 33 | //1. 格式通过，验证是否是专属于这个的token 34 | 35 | //获取当前守护的名称 36 | $present_guard = Auth::getDefaultDriver(); 37 | 38 | //获取当前token 39 | $token=Auth::getToken(); 40 | 41 | //即使过期了，也能获取到token里的 载荷 信息。 42 | $payload = Auth::manager()->getJWTProvider()->decode($token->get()); 43 | //如果不包含guard字段或者guard所对应的值与当前的guard守护值不相同 44 | //证明是不属于当前guard守护的token 45 | if(empty($payload['guard'])||$payload['guard']!=$present_guard){ 46 | throw new TokenInvalidException(); 47 | } 48 | //使用 try 包裹，以捕捉 token 过期所抛出的 TokenExpiredException 异常 49 | //2. 此时进入的都是属于当前guard守护的token 50 | try { 51 | // 检测用户的登录状态，如果正常则通过 52 | if ($this->auth->parseToken()->authenticate()) { 53 | return $next($request); 54 | } 55 | throw new UnauthorizedHttpException('jwt-auth', '未登录'); 56 | } catch (TokenExpiredException $exception) { 57 | // 此处捕获到了 token 过期所抛出的 TokenExpiredException 异常，我们在这里需要做的是刷新该用户的 token 并将它添加到响应头中 58 | try { 59 | // 刷新用户的 token 60 | $token = $this->auth->refresh(); 61 | // 使用一次性登录以保证此次请求的成功 62 | Auth::onceUsingId($this->auth->manager()->getPayloadFactory()->buildClaimsCollection()->toPlainArray()['sub']); 63 | 64 | //刷新了token，将token存入数据库 65 | $user = Auth::user(); 66 | SaveLastTokenJob::dispatch($user,$token); 67 | 68 | } catch (JWTException $exception) { 69 | // 如果捕获到此异常，即代表 refresh 也过期了，用户无法刷新令牌，需要重新登录。 70 | throw new UnauthorizedHttpException('jwt-auth', $exception->getMessage()); 71 | } 72 | } 73 | 74 | // 在响应头中返回新的 token 75 | return $this->setAuthenticationHeader($next($request), $token); 76 | } 77 | } -------------------------------------------------------------------------------- /app/Http/Middleware/Api/UserGuardMiddleware.php: -------------------------------------------------------------------------------- 1 | 'api']); 20 | return $next($request); 21 | } 22 | } -------------------------------------------------------------------------------- /app/Http/Middleware/Authenticate.php: -------------------------------------------------------------------------------- 1 | expectsJson()) { 18 | return route('login'); 19 | } 20 | } 21 | } 22 | -------------------------------------------------------------------------------- /app/Http/Middleware/CheckForMaintenanceMode.php: -------------------------------------------------------------------------------- 1 | check()) { 21 | return redirect('/home'); 22 | } 23 | 24 | return $next($request); 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /app/Http/Middleware/TrimStrings.php: -------------------------------------------------------------------------------- 1 | method()) { 12 | case 'GET': 13 | { 14 | return [ 15 | 'id' => ['required,exists:users,id'] 16 | ]; 17 | } 18 | case 'POST': 19 | { 20 | return [ 21 | 'name' => ['required', 'max:12', 'unique:users,name'], 22 | 'password' => ['required', 'max:16', 'min:6'] 23 | ]; 24 | } 25 | case 'PUT': 26 | case 'PATCH': 27 | case 'DELETE': 28 | default: 29 | { 30 | return [ 31 | 32 | ]; 33 | } 34 | } 35 | } 36 | 37 | public function messages() 38 | { 39 | return [ 40 | 'id.required'=>'用户ID必须填写', 41 | 'id.exists'=>'用户不存在', 42 | 'name.unique' => '用户名已经存在', 43 | 'name.required' => '用户名不能为空', 44 | 'name.max' => '用户名最大长度为12个字符', 45 | 'password.required' => '密码不能为空', 46 | 'password.max' => '密码长度不能超过16个字符', 47 | 'password.min' => '密码长度不能小于6个字符' 48 | ]; 49 | } 50 | } 51 | -------------------------------------------------------------------------------- /app/Http/Requests/Api/FormRequest.php: -------------------------------------------------------------------------------- 1 | method()) { 12 | case 'GET': 13 | { 14 | return [ 15 | 'id' => ['required,exists:users,id'] 16 | ]; 17 | } 18 | case 'POST': 19 | { 20 | return [ 21 | 'name' => ['required', 'max:12', 'unique:users,name'], 22 | 'password' => ['required', 'max:16', 'min:6'] 23 | ]; 24 | } 25 | case 'PUT': 26 | case 'PATCH': 27 | case 'DELETE': 28 | default: 29 | { 30 | return [ 31 | 32 | ]; 33 | } 34 | } 35 | } 36 | 37 | public function messages() 38 | { 39 | return [ 40 | 'id.required'=>'用户ID必须填写', 41 | 'id.exists'=>'用户不存在', 42 | 'name.unique' => '用户名已经存在', 43 | 'name.required' => '用户名不能为空', 44 | 'name.max' => '用户名最大长度为12个字符', 45 | 'password.required' => '密码不能为空', 46 | 'password.max' => '密码长度不能超过16个字符', 47 | 'password.min' => '密码长度不能小于6个字符' 48 | ]; 49 | } 50 | } 51 | -------------------------------------------------------------------------------- /app/Http/Resources/Api/AdminResource.php: -------------------------------------------------------------------------------- 1 | $this->id, 20 | 'name' => $this->name, 21 | 'status' => AdminEnum::getStatusName($this->status), 22 | 'created_at'=>(string)$this->created_at, 23 | 'updated_at'=>(string)$this->updated_at 24 | ]; 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /app/Http/Resources/Api/UserResource.php: -------------------------------------------------------------------------------- 1 | $this->id, 20 | 'name' => $this->name, 21 | 'status' => UserEnum::getStatusName($this->status), 22 | 'created_at'=>(string)$this->created_at, 23 | 'updated_at'=>(string)$this->updated_at 24 | ]; 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /app/Jobs/Api/SaveLastTokenJob.php: -------------------------------------------------------------------------------- 1 | model=$model; 26 | $this->token=$token; 27 | } 28 | 29 | /** 30 | * Execute the job. 31 | * 32 | * @return void 33 | */ 34 | public function handle() 35 | { 36 | // 37 | $this->model->last_token = $this->token; 38 | $this->model->save(); 39 | } 40 | } 41 | -------------------------------------------------------------------------------- /app/Models/Admin.php: -------------------------------------------------------------------------------- 1 | getKey(); 20 | } 21 | 22 | /** 23 | * Return a key value array, containing any custom claims to be added to the JWT. 24 | * 25 | * @return array 26 | */ 27 | public function getJWTCustomClaims() 28 | { 29 | return []; 30 | } 31 | 32 | protected $table = 'admins'; 33 | /** 34 | * The attributes that are mass assignable. 35 | * 36 | * @var array 37 | */ 38 | protected $fillable = [ 39 | 'name', 'password' 40 | ]; 41 | 42 | /** 43 | * The attributes that should be hidden for arrays. 44 | * 45 | * @var array 46 | */ 47 | protected $hidden = [ 48 | 'password' 49 | ]; 50 | //将密码进行加密 51 | public function setPasswordAttribute($value) 52 | { 53 | $this->attributes['password'] = bcrypt($value); 54 | } 55 | } 56 | -------------------------------------------------------------------------------- /app/Models/Book.php: -------------------------------------------------------------------------------- 1 | getKey(); 20 | } 21 | 22 | /** 23 | * Return a key value array, containing any custom claims to be added to the JWT. 24 | * 25 | * @return array 26 | */ 27 | public function getJWTCustomClaims() 28 | { 29 | return []; 30 | } 31 | protected $table = 'users'; 32 | /** 33 | * The attributes that are mass assignable. 34 | * 35 | * @var array 36 | */ 37 | protected $fillable = [ 38 | 'name', 'password' 39 | ]; 40 | 41 | /** 42 | * The attributes that should be hidden for arrays. 43 | * 44 | * @var array 45 | */ 46 | protected $hidden = [ 47 | 'password' 48 | ]; 49 | //将密码进行加密 50 | public function setPasswordAttribute($value) 51 | { 52 | $this->attributes['password'] = bcrypt($value); 53 | } 54 | public function books(){ 55 | return $this->hasMany(Book::class,'user_id','id')->limit(2); 56 | } 57 | } 58 | -------------------------------------------------------------------------------- /app/Providers/AppServiceProvider.php: -------------------------------------------------------------------------------- 1 | 'App\Policies\ModelPolicy', 18 | ]; 19 | 20 | /** 21 | * Register any authentication / authorization services. 22 | * 23 | * @return void 24 | */ 25 | public function boot() 26 | { 27 | $this->registerPolicies(); 28 | Horizon::auth(function($request){ 29 | if(env('APP_ENV','local') == 'local'){ 30 | return true; 31 | }else{ 32 | $get_ip = $request->getClientIp(); 33 | $can_ip=env('HORIZON_IP','127.0.0.1'); 34 | return $get_ip == $can_ip; 35 | } 36 | }); 37 | // 38 | } 39 | } 40 | -------------------------------------------------------------------------------- /app/Providers/BroadcastServiceProvider.php: -------------------------------------------------------------------------------- 1 | [ 19 | SendEmailVerificationNotification::class, 20 | ], 21 | ]; 22 | 23 | /** 24 | * Register any events for your application. 25 | * 26 | * @return void 27 | */ 28 | public function boot() 29 | { 30 | parent::boot(); 31 | 32 | // 33 | } 34 | } 35 | -------------------------------------------------------------------------------- /app/Providers/HorizonServiceProvider.php: -------------------------------------------------------------------------------- 1 | email, [ 36 | // 37 | ]); 38 | }); 39 | } 40 | 41 | /** 42 | * Register any application services. 43 | * 44 | * @return void 45 | */ 46 | public function register() 47 | { 48 | // Horizon::night(); 49 | } 50 | } 51 | -------------------------------------------------------------------------------- /app/Providers/RouteServiceProvider.php: -------------------------------------------------------------------------------- 1 | mapApiRoutes(); 39 | 40 | $this->mapWebRoutes(); 41 | 42 | // 43 | } 44 | 45 | /** 46 | * Define the "web" routes for the application. 47 | * 48 | * These routes all receive session state, CSRF protection, etc. 49 | * 50 | * @return void 51 | */ 52 | protected function mapWebRoutes() 53 | { 54 | Route::middleware('web') 55 | ->namespace($this->namespace) 56 | ->group(base_path('routes/web.php')); 57 | } 58 | 59 | /** 60 | * Define the "api" routes for the application. 61 | * 62 | * These routes are typically stateless. 63 | * 64 | * @return void 65 | */ 66 | protected function mapApiRoutes() 67 | { 68 | Route::prefix('api') 69 | ->middleware('api') 70 | ->namespace($this->namespace) 71 | ->group(base_path('routes/api.php')); 72 | } 73 | } 74 | -------------------------------------------------------------------------------- /artisan: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env php 2 | make(Illuminate\Contracts\Console\Kernel::class); 34 | 35 | $status = $kernel->handle( 36 | $input = new Symfony\Component\Console\Input\ArgvInput, 37 | new Symfony\Component\Console\Output\ConsoleOutput 38 | ); 39 | 40 | /* 41 | |-------------------------------------------------------------------------- 42 | | Shutdown The Application 43 | |-------------------------------------------------------------------------- 44 | | 45 | | Once Artisan has finished running, we will fire off the shutdown events 46 | | so that any final work may be done by the application before we shut 47 | | down the process. This is the last thing to happen to the request. 48 | | 49 | */ 50 | 51 | $kernel->terminate($input, $status); 52 | 53 | exit($status); 54 | -------------------------------------------------------------------------------- /bootstrap/app.php: -------------------------------------------------------------------------------- 1 | singleton( 30 | Illuminate\Contracts\Http\Kernel::class, 31 | App\Http\Kernel::class 32 | ); 33 | 34 | $app->singleton( 35 | Illuminate\Contracts\Console\Kernel::class, 36 | App\Console\Kernel::class 37 | ); 38 | 39 | $app->singleton( 40 | Illuminate\Contracts\Debug\ExceptionHandler::class, 41 | App\Exceptions\Handler::class 42 | ); 43 | 44 | /* 45 | |-------------------------------------------------------------------------- 46 | | Return The Application 47 | |-------------------------------------------------------------------------- 48 | | 49 | | This script returns the application instance. The instance is given to 50 | | the calling script so we can separate the building of the instances 51 | | from the actual running of the application and sending responses. 52 | | 53 | */ 54 | 55 | return $app; 56 | -------------------------------------------------------------------------------- /bootstrap/cache/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /composer.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "laravel/laravel", 3 | "type": "project", 4 | "description": "The Laravel Framework.", 5 | "keywords": [ 6 | "framework", 7 | "laravel" 8 | ], 9 | "license": "MIT", 10 | "require": { 11 | "php": "^7.1.3", 12 | "fideloper/proxy": "^4.0", 13 | "laravel/framework": "5.7.*", 14 | "laravel/horizon": "^3.0", 15 | "laravel/tinker": "^1.0", 16 | "medz/cors": "^1.4", 17 | "tymon/jwt-auth": "1.0.0-rc.3" 18 | }, 19 | "require-dev": { 20 | "beyondcode/laravel-dump-server": "^1.0", 21 | "filp/whoops": "^2.0", 22 | "fzaninotto/faker": "^1.4", 23 | "mockery/mockery": "^1.0", 24 | "nunomaduro/collision": "^2.0", 25 | "phpunit/phpunit": "^7.0" 26 | }, 27 | "config": { 28 | "optimize-autoloader": true, 29 | "preferred-install": "dist", 30 | "sort-packages": true 31 | }, 32 | "extra": { 33 | "laravel": { 34 | "dont-discover": [] 35 | } 36 | }, 37 | "autoload": { 38 | "psr-4": { 39 | "App\\": "app/" 40 | }, 41 | "classmap": [ 42 | "database/seeds", 43 | "database/factories" 44 | ] 45 | }, 46 | "autoload-dev": { 47 | "psr-4": { 48 | "Tests\\": "tests/" 49 | } 50 | }, 51 | "minimum-stability": "dev", 52 | "prefer-stable": true, 53 | "scripts": { 54 | "post-autoload-dump": [ 55 | "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump", 56 | "@php artisan package:discover --ansi" 57 | ], 58 | "post-root-package-install": [ 59 | "@php -r \"file_exists('.env') || copy('.env.example', '.env');\"" 60 | ], 61 | "post-create-project-cmd": [ 62 | "@php artisan key:generate --ansi" 63 | ] 64 | } 65 | } 66 | -------------------------------------------------------------------------------- /config/app.php: -------------------------------------------------------------------------------- 1 | env('APP_NAME', 'Laravel'), 17 | 18 | /* 19 | |-------------------------------------------------------------------------- 20 | | Application Environment 21 | |-------------------------------------------------------------------------- 22 | | 23 | | This value determines the "environment" your application is currently 24 | | running in. This may determine how you prefer to configure various 25 | | services the application utilizes. Set this in your ".env" file. 26 | | 27 | */ 28 | 29 | 'env' => env('APP_ENV', 'production'), 30 | 31 | /* 32 | |-------------------------------------------------------------------------- 33 | | Application Debug Mode 34 | |-------------------------------------------------------------------------- 35 | | 36 | | When your application is in debug mode, detailed error messages with 37 | | stack traces will be shown on every error that occurs within your 38 | | application. If disabled, a simple generic error page is shown. 39 | | 40 | */ 41 | 42 | 'debug' => env('APP_DEBUG', false), 43 | 44 | /* 45 | |-------------------------------------------------------------------------- 46 | | Application URL 47 | |-------------------------------------------------------------------------- 48 | | 49 | | This URL is used by the console to properly generate URLs when using 50 | | the Artisan command line tool. You should set this to the root of 51 | | your application so that it is used when running Artisan tasks. 52 | | 53 | */ 54 | 55 | 'url' => env('APP_URL', 'http://localhost'), 56 | 57 | 'asset_url' => env('ASSET_URL', null), 58 | 59 | /* 60 | |-------------------------------------------------------------------------- 61 | | Application Timezone 62 | |-------------------------------------------------------------------------- 63 | | 64 | | Here you may specify the default timezone for your application, which 65 | | will be used by the PHP date and date-time functions. We have gone 66 | | ahead and set this to a sensible default for you out of the box. 67 | | 68 | */ 69 | 70 | 'timezone' => 'UTC', 71 | 72 | /* 73 | |-------------------------------------------------------------------------- 74 | | Application Locale Configuration 75 | |-------------------------------------------------------------------------- 76 | | 77 | | The application locale determines the default locale that will be used 78 | | by the translation service provider. You are free to set this value 79 | | to any of the locales which will be supported by the application. 80 | | 81 | */ 82 | 83 | 'locale' => 'en', 84 | 85 | /* 86 | |-------------------------------------------------------------------------- 87 | | Application Fallback Locale 88 | |-------------------------------------------------------------------------- 89 | | 90 | | The fallback locale determines the locale to use when the current one 91 | | is not available. You may change the value to correspond to any of 92 | | the language folders that are provided through your application. 93 | | 94 | */ 95 | 96 | 'fallback_locale' => 'en', 97 | 98 | /* 99 | |-------------------------------------------------------------------------- 100 | | Faker Locale 101 | |-------------------------------------------------------------------------- 102 | | 103 | | This locale will be used by the Faker PHP library when generating fake 104 | | data for your database seeds. For example, this will be used to get 105 | | localized telephone numbers, street address information and more. 106 | | 107 | */ 108 | 109 | 'faker_locale' => 'en_US', 110 | 111 | /* 112 | |-------------------------------------------------------------------------- 113 | | Encryption Key 114 | |-------------------------------------------------------------------------- 115 | | 116 | | This key is used by the Illuminate encrypter service and should be set 117 | | to a random, 32 character string, otherwise these encrypted strings 118 | | will not be safe. Please do this before deploying an application! 119 | | 120 | */ 121 | 122 | 'key' => env('APP_KEY'), 123 | 124 | 'cipher' => 'AES-256-CBC', 125 | 126 | /* 127 | |-------------------------------------------------------------------------- 128 | | Autoloaded Service Providers 129 | |-------------------------------------------------------------------------- 130 | | 131 | | The service providers listed here will be automatically loaded on the 132 | | request to your application. Feel free to add your own services to 133 | | this array to grant expanded functionality to your applications. 134 | | 135 | */ 136 | 137 | 'providers' => [ 138 | 139 | /* 140 | * Laravel Framework Service Providers... 141 | */ 142 | Illuminate\Auth\AuthServiceProvider::class, 143 | Illuminate\Broadcasting\BroadcastServiceProvider::class, 144 | Illuminate\Bus\BusServiceProvider::class, 145 | Illuminate\Cache\CacheServiceProvider::class, 146 | Illuminate\Foundation\Providers\ConsoleSupportServiceProvider::class, 147 | Illuminate\Cookie\CookieServiceProvider::class, 148 | Illuminate\Database\DatabaseServiceProvider::class, 149 | Illuminate\Encryption\EncryptionServiceProvider::class, 150 | Illuminate\Filesystem\FilesystemServiceProvider::class, 151 | Illuminate\Foundation\Providers\FoundationServiceProvider::class, 152 | Illuminate\Hashing\HashServiceProvider::class, 153 | Illuminate\Mail\MailServiceProvider::class, 154 | Illuminate\Notifications\NotificationServiceProvider::class, 155 | Illuminate\Pagination\PaginationServiceProvider::class, 156 | Illuminate\Pipeline\PipelineServiceProvider::class, 157 | Illuminate\Queue\QueueServiceProvider::class, 158 | Illuminate\Redis\RedisServiceProvider::class, 159 | Illuminate\Auth\Passwords\PasswordResetServiceProvider::class, 160 | Illuminate\Session\SessionServiceProvider::class, 161 | Illuminate\Translation\TranslationServiceProvider::class, 162 | Illuminate\Validation\ValidationServiceProvider::class, 163 | Illuminate\View\ViewServiceProvider::class, 164 | 165 | /* 166 | * Package Service Providers... 167 | */ 168 | 169 | /* 170 | * Application Service Providers... 171 | */ 172 | App\Providers\AppServiceProvider::class, 173 | App\Providers\AuthServiceProvider::class, 174 | // App\Providers\BroadcastServiceProvider::class, 175 | App\Providers\EventServiceProvider::class, 176 | App\Providers\RouteServiceProvider::class, 177 | Tymon\JWTAuth\Providers\LaravelServiceProvider::class, 178 | ], 179 | 180 | /* 181 | |-------------------------------------------------------------------------- 182 | | Class Aliases 183 | |-------------------------------------------------------------------------- 184 | | 185 | | This array of class aliases will be registered when this application 186 | | is started. However, feel free to register as many as you wish as 187 | | the aliases are "lazy" loaded so they don't hinder performance. 188 | | 189 | */ 190 | 191 | 'aliases' => [ 192 | 193 | 'App' => Illuminate\Support\Facades\App::class, 194 | 'Artisan' => Illuminate\Support\Facades\Artisan::class, 195 | 'Auth' => Illuminate\Support\Facades\Auth::class, 196 | 'Blade' => Illuminate\Support\Facades\Blade::class, 197 | 'Broadcast' => Illuminate\Support\Facades\Broadcast::class, 198 | 'Bus' => Illuminate\Support\Facades\Bus::class, 199 | 'Cache' => Illuminate\Support\Facades\Cache::class, 200 | 'Config' => Illuminate\Support\Facades\Config::class, 201 | 'Cookie' => Illuminate\Support\Facades\Cookie::class, 202 | 'Crypt' => Illuminate\Support\Facades\Crypt::class, 203 | 'DB' => Illuminate\Support\Facades\DB::class, 204 | 'Eloquent' => Illuminate\Database\Eloquent\Model::class, 205 | 'Event' => Illuminate\Support\Facades\Event::class, 206 | 'File' => Illuminate\Support\Facades\File::class, 207 | 'Gate' => Illuminate\Support\Facades\Gate::class, 208 | 'Hash' => Illuminate\Support\Facades\Hash::class, 209 | 'Lang' => Illuminate\Support\Facades\Lang::class, 210 | 'Log' => Illuminate\Support\Facades\Log::class, 211 | 'Mail' => Illuminate\Support\Facades\Mail::class, 212 | 'Notification' => Illuminate\Support\Facades\Notification::class, 213 | 'Password' => Illuminate\Support\Facades\Password::class, 214 | 'Queue' => Illuminate\Support\Facades\Queue::class, 215 | 'Redirect' => Illuminate\Support\Facades\Redirect::class, 216 | 'Redis' => Illuminate\Support\Facades\Redis::class, 217 | 'Request' => Illuminate\Support\Facades\Request::class, 218 | 'Response' => Illuminate\Support\Facades\Response::class, 219 | 'Route' => Illuminate\Support\Facades\Route::class, 220 | 'Schema' => Illuminate\Support\Facades\Schema::class, 221 | 'Session' => Illuminate\Support\Facades\Session::class, 222 | 'Storage' => Illuminate\Support\Facades\Storage::class, 223 | 'URL' => Illuminate\Support\Facades\URL::class, 224 | 'Validator' => Illuminate\Support\Facades\Validator::class, 225 | 'View' => Illuminate\Support\Facades\View::class, 226 | 227 | ], 228 | 229 | ]; 230 | -------------------------------------------------------------------------------- /config/auth.php: -------------------------------------------------------------------------------- 1 | [ 17 | 'guard' => 'web', 18 | 'passwords' => 'users', 19 | ], 20 | 21 | /* 22 | |-------------------------------------------------------------------------- 23 | | Authentication Guards 24 | |-------------------------------------------------------------------------- 25 | | 26 | | Next, you may define every authentication guard for your application. 27 | | Of course, a great default configuration has been defined for you 28 | | here which uses session storage and the Eloquent user provider. 29 | | 30 | | All authentication drivers have a user provider. This defines how the 31 | | users are actually retrieved out of your database or other storage 32 | | mechanisms used by this application to persist your user's data. 33 | | 34 | | Supported: "session", "token" 35 | | 36 | */ 37 | 38 | 'guards' => [ 39 | 'web' => [ 40 | 'driver' => 'session', 41 | 'provider' => 'users', 42 | ], 43 | 44 | 'api' => [ 45 | 'driver' => 'jwt', 46 | 'provider' => 'users', 47 | ], 48 | 49 | 'admin' => [ 50 | 'driver' => 'jwt', 51 | 'provider' => 'admins', 52 | ], 53 | ], 54 | 55 | /* 56 | |-------------------------------------------------------------------------- 57 | | User Providers 58 | |-------------------------------------------------------------------------- 59 | | 60 | | All authentication drivers have a user provider. This defines how the 61 | | users are actually retrieved out of your database or other storage 62 | | mechanisms used by this application to persist your user's data. 63 | | 64 | | If you have multiple user tables or models you may configure multiple 65 | | sources which represent each model / table. These sources may then 66 | | be assigned to any extra authentication guards you have defined. 67 | | 68 | | Supported: "database", "eloquent" 69 | | 70 | */ 71 | 72 | 'providers' => [ 73 | 'users' => [ 74 | 'driver' => 'eloquent', 75 | 'model' => App\Models\User::class, 76 | ], 77 | 'admins' => [ 78 | 'driver' => 'eloquent', 79 | 'model' => App\Models\Admin::class, 80 | ], 81 | // 'users' => [ 82 | // 'driver' => 'database', 83 | // 'table' => 'users', 84 | // ], 85 | ], 86 | 87 | /* 88 | |-------------------------------------------------------------------------- 89 | | Resetting Passwords 90 | |-------------------------------------------------------------------------- 91 | | 92 | | You may specify multiple password reset configurations if you have more 93 | | than one user table or model in the application and you want to have 94 | | separate password reset settings based on the specific user types. 95 | | 96 | | The expire time is the number of minutes that the reset token should be 97 | | considered valid. This security feature keeps tokens short-lived so 98 | | they have less time to be guessed. You may change this as needed. 99 | | 100 | */ 101 | 102 | 'passwords' => [ 103 | 'users' => [ 104 | 'provider' => 'users', 105 | 'table' => 'password_resets', 106 | 'expire' => 60, 107 | ], 108 | ], 109 | 110 | ]; 111 | -------------------------------------------------------------------------------- /config/broadcasting.php: -------------------------------------------------------------------------------- 1 | env('BROADCAST_DRIVER', 'null'), 19 | 20 | /* 21 | |-------------------------------------------------------------------------- 22 | | Broadcast Connections 23 | |-------------------------------------------------------------------------- 24 | | 25 | | Here you may define all of the broadcast connections that will be used 26 | | to broadcast events to other systems or over websockets. Samples of 27 | | each available type of connection are provided inside this array. 28 | | 29 | */ 30 | 31 | 'connections' => [ 32 | 33 | 'pusher' => [ 34 | 'driver' => 'pusher', 35 | 'key' => env('PUSHER_APP_KEY'), 36 | 'secret' => env('PUSHER_APP_SECRET'), 37 | 'app_id' => env('PUSHER_APP_ID'), 38 | 'options' => [ 39 | 'cluster' => env('PUSHER_APP_CLUSTER'), 40 | 'encrypted' => true, 41 | ], 42 | ], 43 | 44 | 'redis' => [ 45 | 'driver' => 'redis', 46 | 'connection' => 'default', 47 | ], 48 | 49 | 'log' => [ 50 | 'driver' => 'log', 51 | ], 52 | 53 | 'null' => [ 54 | 'driver' => 'null', 55 | ], 56 | 57 | ], 58 | 59 | ]; 60 | -------------------------------------------------------------------------------- /config/cache.php: -------------------------------------------------------------------------------- 1 | env('CACHE_DRIVER', 'file'), 21 | 22 | /* 23 | |-------------------------------------------------------------------------- 24 | | Cache Stores 25 | |-------------------------------------------------------------------------- 26 | | 27 | | Here you may define all of the cache "stores" for your application as 28 | | well as their drivers. You may even define multiple stores for the 29 | | same cache driver to group types of items stored in your caches. 30 | | 31 | */ 32 | 33 | 'stores' => [ 34 | 35 | 'apc' => [ 36 | 'driver' => 'apc', 37 | ], 38 | 39 | 'array' => [ 40 | 'driver' => 'array', 41 | ], 42 | 43 | 'database' => [ 44 | 'driver' => 'database', 45 | 'table' => 'cache', 46 | 'connection' => null, 47 | ], 48 | 49 | 'file' => [ 50 | 'driver' => 'file', 51 | 'path' => storage_path('framework/cache/data'), 52 | ], 53 | 54 | 'memcached' => [ 55 | 'driver' => 'memcached', 56 | 'persistent_id' => env('MEMCACHED_PERSISTENT_ID'), 57 | 'sasl' => [ 58 | env('MEMCACHED_USERNAME'), 59 | env('MEMCACHED_PASSWORD'), 60 | ], 61 | 'options' => [ 62 | // Memcached::OPT_CONNECT_TIMEOUT => 2000, 63 | ], 64 | 'servers' => [ 65 | [ 66 | 'host' => env('MEMCACHED_HOST', '127.0.0.1'), 67 | 'port' => env('MEMCACHED_PORT', 11211), 68 | 'weight' => 100, 69 | ], 70 | ], 71 | ], 72 | 73 | 'redis' => [ 74 | 'driver' => 'redis', 75 | 'connection' => 'cache', 76 | ], 77 | 78 | ], 79 | 80 | /* 81 | |-------------------------------------------------------------------------- 82 | | Cache Key Prefix 83 | |-------------------------------------------------------------------------- 84 | | 85 | | When utilizing a RAM based store such as APC or Memcached, there might 86 | | be other applications utilizing the same cache. So, we'll specify a 87 | | value to get prefixed to all our keys so we can avoid collisions. 88 | | 89 | */ 90 | 91 | 'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_cache'), 92 | 93 | ]; 94 | -------------------------------------------------------------------------------- /config/cors.php: -------------------------------------------------------------------------------- 1 | env('CORS_ALLOW_CREDENTIAILS', false), // set "Access-Control-Allow-Credentials" 👉 string "false" or "true". 5 | 'allow-headers' => ['*'], // ex: Content-Type, Accept, X-Requested-With 6 | 'expose-headers' => ['Authorization'], 7 | 'origins' => ['*'], // ex: http://localhost 8 | 'methods' => ['*'], // ex: GET, POST, PUT, PATCH, DELETE 9 | 'max-age' => env('CORS_ACCESS_CONTROL_MAX_AGE', 0), 10 | 'laravel' => [ 11 | 'allow-route-perfix' => env('CORS_LARAVEL_ALLOW_ROUTE_PERFIX', '*'), // The perfix is using \Illumante\Http\Request::is method. 👉 12 | 'route-group-mode' => env('CORS_LARAVEL_ROUTE_GROUP_MODE', false), 13 | ], 14 | ]; 15 | -------------------------------------------------------------------------------- /config/database.php: -------------------------------------------------------------------------------- 1 | env('DB_CONNECTION', 'mysql'), 17 | 18 | /* 19 | |-------------------------------------------------------------------------- 20 | | Database Connections 21 | |-------------------------------------------------------------------------- 22 | | 23 | | Here are each of the database connections setup for your application. 24 | | Of course, examples of configuring each database platform that is 25 | | supported by Laravel is shown below to make development simple. 26 | | 27 | | 28 | | All database work in Laravel is done through the PHP PDO facilities 29 | | so make sure you have the driver for your particular database of 30 | | choice installed on your machine before you begin development. 31 | | 32 | */ 33 | 34 | 'connections' => [ 35 | 36 | 'sqlite' => [ 37 | 'driver' => 'sqlite', 38 | 'database' => env('DB_DATABASE', database_path('database.sqlite')), 39 | 'prefix' => '', 40 | 'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true), 41 | ], 42 | 43 | 'mysql' => [ 44 | 'driver' => 'mysql', 45 | 'host' => env('DB_HOST', '127.0.0.1'), 46 | 'port' => env('DB_PORT', '3306'), 47 | 'database' => env('DB_DATABASE', 'forge'), 48 | 'username' => env('DB_USERNAME', 'forge'), 49 | 'password' => env('DB_PASSWORD', ''), 50 | 'unix_socket' => env('DB_SOCKET', ''), 51 | 'charset' => 'utf8mb4', 52 | 'collation' => 'utf8mb4_unicode_ci', 53 | 'prefix' => '', 54 | 'prefix_indexes' => true, 55 | 'strict' => true, 56 | 'engine' => null, 57 | ], 58 | 59 | 'pgsql' => [ 60 | 'driver' => 'pgsql', 61 | 'host' => env('DB_HOST', '127.0.0.1'), 62 | 'port' => env('DB_PORT', '5432'), 63 | 'database' => env('DB_DATABASE', 'forge'), 64 | 'username' => env('DB_USERNAME', 'forge'), 65 | 'password' => env('DB_PASSWORD', ''), 66 | 'charset' => 'utf8', 67 | 'prefix' => '', 68 | 'prefix_indexes' => true, 69 | 'schema' => 'public', 70 | 'sslmode' => 'prefer', 71 | ], 72 | 73 | 'sqlsrv' => [ 74 | 'driver' => 'sqlsrv', 75 | 'host' => env('DB_HOST', 'localhost'), 76 | 'port' => env('DB_PORT', '1433'), 77 | 'database' => env('DB_DATABASE', 'forge'), 78 | 'username' => env('DB_USERNAME', 'forge'), 79 | 'password' => env('DB_PASSWORD', ''), 80 | 'charset' => 'utf8', 81 | 'prefix' => '', 82 | 'prefix_indexes' => true, 83 | ], 84 | 85 | ], 86 | 87 | /* 88 | |-------------------------------------------------------------------------- 89 | | Migration Repository Table 90 | |-------------------------------------------------------------------------- 91 | | 92 | | This table keeps track of all the migrations that have already run for 93 | | your application. Using this information, we can determine which of 94 | | the migrations on disk haven't actually been run in the database. 95 | | 96 | */ 97 | 98 | 'migrations' => 'migrations', 99 | 100 | /* 101 | |-------------------------------------------------------------------------- 102 | | Redis Databases 103 | |-------------------------------------------------------------------------- 104 | | 105 | | Redis is an open source, fast, and advanced key-value store that also 106 | | provides a richer body of commands than a typical key-value system 107 | | such as APC or Memcached. Laravel makes it easy to dig right in. 108 | | 109 | */ 110 | 111 | 'redis' => [ 112 | 113 | 'client' => 'predis', 114 | 115 | 'default' => [ 116 | 'host' => env('REDIS_HOST', '127.0.0.1'), 117 | 'password' => env('REDIS_PASSWORD', null), 118 | 'port' => env('REDIS_PORT', 6379), 119 | 'database' => env('REDIS_DB', 0), 120 | ], 121 | 122 | 'cache' => [ 123 | 'host' => env('REDIS_HOST', '127.0.0.1'), 124 | 'password' => env('REDIS_PASSWORD', null), 125 | 'port' => env('REDIS_PORT', 6379), 126 | 'database' => env('REDIS_CACHE_DB', 1), 127 | ], 128 | 129 | ], 130 | 131 | ]; 132 | -------------------------------------------------------------------------------- /config/filesystems.php: -------------------------------------------------------------------------------- 1 | env('FILESYSTEM_DRIVER', 'local'), 17 | 18 | /* 19 | |-------------------------------------------------------------------------- 20 | | Default Cloud Filesystem Disk 21 | |-------------------------------------------------------------------------- 22 | | 23 | | Many applications store files both locally and in the cloud. For this 24 | | reason, you may specify a default "cloud" driver here. This driver 25 | | will be bound as the Cloud disk implementation in the container. 26 | | 27 | */ 28 | 29 | 'cloud' => env('FILESYSTEM_CLOUD', 's3'), 30 | 31 | /* 32 | |-------------------------------------------------------------------------- 33 | | Filesystem Disks 34 | |-------------------------------------------------------------------------- 35 | | 36 | | Here you may configure as many filesystem "disks" as you wish, and you 37 | | may even configure multiple disks of the same driver. Defaults have 38 | | been setup for each driver as an example of the required options. 39 | | 40 | | Supported Drivers: "local", "ftp", "sftp", "s3", "rackspace" 41 | | 42 | */ 43 | 44 | 'disks' => [ 45 | 46 | 'local' => [ 47 | 'driver' => 'local', 48 | 'root' => storage_path('app'), 49 | ], 50 | 51 | 'public' => [ 52 | 'driver' => 'local', 53 | 'root' => storage_path('app/public'), 54 | 'url' => env('APP_URL').'/storage', 55 | 'visibility' => 'public', 56 | ], 57 | 58 | 's3' => [ 59 | 'driver' => 's3', 60 | 'key' => env('AWS_ACCESS_KEY_ID'), 61 | 'secret' => env('AWS_SECRET_ACCESS_KEY'), 62 | 'region' => env('AWS_DEFAULT_REGION'), 63 | 'bucket' => env('AWS_BUCKET'), 64 | 'url' => env('AWS_URL'), 65 | ], 66 | 67 | ], 68 | 69 | ]; 70 | -------------------------------------------------------------------------------- /config/hashing.php: -------------------------------------------------------------------------------- 1 | 'bcrypt', 19 | 20 | /* 21 | |-------------------------------------------------------------------------- 22 | | Bcrypt Options 23 | |-------------------------------------------------------------------------- 24 | | 25 | | Here you may specify the configuration options that should be used when 26 | | passwords are hashed using the Bcrypt algorithm. This will allow you 27 | | to control the amount of time it takes to hash the given password. 28 | | 29 | */ 30 | 31 | 'bcrypt' => [ 32 | 'rounds' => env('BCRYPT_ROUNDS', 10), 33 | ], 34 | 35 | /* 36 | |-------------------------------------------------------------------------- 37 | | Argon Options 38 | |-------------------------------------------------------------------------- 39 | | 40 | | Here you may specify the configuration options that should be used when 41 | | passwords are hashed using the Argon algorithm. These will allow you 42 | | to control the amount of time it takes to hash the given password. 43 | | 44 | */ 45 | 46 | 'argon' => [ 47 | 'memory' => 1024, 48 | 'threads' => 2, 49 | 'time' => 2, 50 | ], 51 | 52 | ]; 53 | -------------------------------------------------------------------------------- /config/horizon.php: -------------------------------------------------------------------------------- 1 | 'horizon', 17 | 18 | /* 19 | |-------------------------------------------------------------------------- 20 | | Horizon Redis Connection 21 | |-------------------------------------------------------------------------- 22 | | 23 | | This is the name of the Redis connection where Horizon will store the 24 | | meta information required for it to function. It includes the list 25 | | of supervisors, failed jobs, job metrics, and other information. 26 | | 27 | */ 28 | 29 | 'use' => 'default', 30 | 31 | /* 32 | |-------------------------------------------------------------------------- 33 | | Horizon Redis Prefix 34 | |-------------------------------------------------------------------------- 35 | | 36 | | This prefix will be used when storing all Horizon data in Redis. You 37 | | may modify the prefix when you are running multiple installations 38 | | of Horizon on the same server so that they don't have problems. 39 | | 40 | */ 41 | 42 | 'prefix' => env('HORIZON_PREFIX', 'horizon:'), 43 | 44 | /* 45 | |-------------------------------------------------------------------------- 46 | | Horizon Route Middleware 47 | |-------------------------------------------------------------------------- 48 | | 49 | | These middleware will get attached onto each Horizon route, giving you 50 | | the chance to add your own middleware to this list or change any of 51 | | the existing middleware. Or, you can simply stick with this list. 52 | | 53 | */ 54 | 55 | 'middleware' => ['web'], 56 | 57 | /* 58 | |-------------------------------------------------------------------------- 59 | | Queue Wait Time Thresholds 60 | |-------------------------------------------------------------------------- 61 | | 62 | | This option allows you to configure when the LongWaitDetected event 63 | | will be fired. Every connection / queue combination may have its 64 | | own, unique threshold (in seconds) before this event is fired. 65 | | 66 | */ 67 | 68 | 'waits' => [ 69 | 'redis:default' => 60, 70 | ], 71 | 72 | /* 73 | |-------------------------------------------------------------------------- 74 | | Job Trimming Times 75 | |-------------------------------------------------------------------------- 76 | | 77 | | Here you can configure for how long (in minutes) you desire Horizon to 78 | | persist the recent and failed jobs. Typically, recent jobs are kept 79 | | for one hour while all failed jobs are stored for an entire week. 80 | | 81 | */ 82 | 83 | 'trim' => [ 84 | 'recent' => 60, 85 | 'failed' => 10080, 86 | 'monitored' => 10080, 87 | ], 88 | 89 | /* 90 | |-------------------------------------------------------------------------- 91 | | Fast Termination 92 | |-------------------------------------------------------------------------- 93 | | 94 | | When this option is enabled, Horizon's "terminate" command will not 95 | | wait on all of the workers to terminate unless the --wait option 96 | | is provided. Fast termination can shorten deployment delay by 97 | | allowing a new instance of Horizon to start while the last 98 | | instance will continue to terminate each of its workers. 99 | | 100 | */ 101 | 102 | 'fast_termination' => false, 103 | 104 | /* 105 | |-------------------------------------------------------------------------- 106 | | Memory Limit (MB) 107 | |-------------------------------------------------------------------------- 108 | | 109 | | This value describes the maximum amount of memory the Horizon worker 110 | | may consume before it is terminated and restarted. You should set 111 | | this value according to the resources available to your server. 112 | | 113 | */ 114 | 115 | 'memory_limit' => 64, 116 | 117 | /* 118 | |-------------------------------------------------------------------------- 119 | | Queue Worker Configuration 120 | |-------------------------------------------------------------------------- 121 | | 122 | | Here you may define the queue worker settings used by your application 123 | | in all environments. These supervisors and settings handle all your 124 | | queued jobs and will be provisioned by Horizon during deployment. 125 | | 126 | */ 127 | 128 | 'environments' => [ 129 | 'production' => [ 130 | 'supervisor-1' => [ 131 | 'connection' => 'redis', 132 | 'queue' => ['default'], 133 | 'balance' => 'simple', 134 | 'processes' => 10, 135 | 'tries' => 3, 136 | ], 137 | ], 138 | 139 | 'local' => [ 140 | 'supervisor-1' => [ 141 | 'connection' => 'redis', 142 | 'queue' => ['default'], 143 | 'balance' => 'simple', 144 | 'processes' => 3, 145 | 'tries' => 3, 146 | ], 147 | ], 148 | ], 149 | ]; 150 | -------------------------------------------------------------------------------- /config/jwt.php: -------------------------------------------------------------------------------- 1 | 7 | * 8 | * For the full copyright and license information, please view the LICENSE 9 | * file that was distributed with this source code. 10 | */ 11 | 12 | return [ 13 | 14 | /* 15 | |-------------------------------------------------------------------------- 16 | | JWT Authentication Secret 17 | |-------------------------------------------------------------------------- 18 | | 19 | | Don't forget to set this in your .env file, as it will be used to sign 20 | | your tokens. A helper command is provided for this: 21 | | `php artisan jwt:secret` 22 | | 23 | | Note: This will be used for Symmetric algorithms only (HMAC), 24 | | since RSA and ECDSA use a private/public key combo (See below). 25 | | 26 | */ 27 | 28 | 'secret' => env('JWT_SECRET'), 29 | 30 | /* 31 | |-------------------------------------------------------------------------- 32 | | JWT Authentication Keys 33 | |-------------------------------------------------------------------------- 34 | | 35 | | The algorithm you are using, will determine whether your tokens are 36 | | signed with a random string (defined in `JWT_SECRET`) or using the 37 | | following public & private keys. 38 | | 39 | | Symmetric Algorithms: 40 | | HS256, HS384 & HS512 will use `JWT_SECRET`. 41 | | 42 | | Asymmetric Algorithms: 43 | | RS256, RS384 & RS512 / ES256, ES384 & ES512 will use the keys below. 44 | | 45 | */ 46 | 47 | 'keys' => [ 48 | 49 | /* 50 | |-------------------------------------------------------------------------- 51 | | Public Key 52 | |-------------------------------------------------------------------------- 53 | | 54 | | A path or resource to your public key. 55 | | 56 | | E.g. 'file://path/to/public/key' 57 | | 58 | */ 59 | 60 | 'public' => env('JWT_PUBLIC_KEY'), 61 | 62 | /* 63 | |-------------------------------------------------------------------------- 64 | | Private Key 65 | |-------------------------------------------------------------------------- 66 | | 67 | | A path or resource to your private key. 68 | | 69 | | E.g. 'file://path/to/private/key' 70 | | 71 | */ 72 | 73 | 'private' => env('JWT_PRIVATE_KEY'), 74 | 75 | /* 76 | |-------------------------------------------------------------------------- 77 | | Passphrase 78 | |-------------------------------------------------------------------------- 79 | | 80 | | The passphrase for your private key. Can be null if none set. 81 | | 82 | */ 83 | 84 | 'passphrase' => env('JWT_PASSPHRASE'), 85 | 86 | ], 87 | 88 | /* 89 | |-------------------------------------------------------------------------- 90 | | JWT time to live 91 | |-------------------------------------------------------------------------- 92 | | 93 | | Specify the length of time (in minutes) that the token will be valid for. 94 | | Defaults to 1 hour. 95 | | 96 | | You can also set this to null, to yield a never expiring token. 97 | | Some people may want this behaviour for e.g. a mobile app. 98 | | This is not particularly recommended, so make sure you have appropriate 99 | | systems in place to revoke the token if necessary. 100 | | Notice: If you set this to null you should remove 'exp' element from 'required_claims' list. 101 | | 102 | */ 103 | 104 | 'ttl' => env('JWT_TTL', 60), 105 | 106 | /* 107 | |-------------------------------------------------------------------------- 108 | | Refresh time to live 109 | |-------------------------------------------------------------------------- 110 | | 111 | | Specify the length of time (in minutes) that the token can be refreshed 112 | | within. I.E. The user can refresh their token within a 2 week window of 113 | | the original token being created until they must re-authenticate. 114 | | Defaults to 2 weeks. 115 | | 116 | | You can also set this to null, to yield an infinite refresh time. 117 | | Some may want this instead of never expiring tokens for e.g. a mobile app. 118 | | This is not particularly recommended, so make sure you have appropriate 119 | | systems in place to revoke the token if necessary. 120 | | 121 | */ 122 | 123 | 'refresh_ttl' => env('JWT_REFRESH_TTL', 20160), 124 | 125 | /* 126 | |-------------------------------------------------------------------------- 127 | | JWT hashing algorithm 128 | |-------------------------------------------------------------------------- 129 | | 130 | | Specify the hashing algorithm that will be used to sign the token. 131 | | 132 | | See here: https://github.com/namshi/jose/tree/master/src/Namshi/JOSE/Signer/OpenSSL 133 | | for possible values. 134 | | 135 | */ 136 | 137 | 'algo' => env('JWT_ALGO', 'HS256'), 138 | 139 | /* 140 | |-------------------------------------------------------------------------- 141 | | Required Claims 142 | |-------------------------------------------------------------------------- 143 | | 144 | | Specify the required claims that must exist in any token. 145 | | A TokenInvalidException will be thrown if any of these claims are not 146 | | present in the payload. 147 | | 148 | */ 149 | 150 | 'required_claims' => [ 151 | 'iss', 152 | 'iat', 153 | 'exp', 154 | 'nbf', 155 | 'sub', 156 | 'jti', 157 | ], 158 | 159 | /* 160 | |-------------------------------------------------------------------------- 161 | | Persistent Claims 162 | |-------------------------------------------------------------------------- 163 | | 164 | | Specify the claim keys to be persisted when refreshing a token. 165 | | `sub` and `iat` will automatically be persisted, in 166 | | addition to the these claims. 167 | | 168 | | Note: If a claim does not exist then it will be ignored. 169 | | 170 | */ 171 | 172 | 'persistent_claims' => [ 173 | // 'foo', 174 | // 'bar', 175 | ], 176 | 177 | /* 178 | |-------------------------------------------------------------------------- 179 | | Lock Subject 180 | |-------------------------------------------------------------------------- 181 | | 182 | | This will determine whether a `prv` claim is automatically added to 183 | | the token. The purpose of this is to ensure that if you have multiple 184 | | authentication models e.g. `App\User` & `App\OtherPerson`, then we 185 | | should prevent one authentication request from impersonating another, 186 | | if 2 tokens happen to have the same id across the 2 different models. 187 | | 188 | | Under specific circumstances, you may want to disable this behaviour 189 | | e.g. if you only have one authentication model, then you would save 190 | | a little on token size. 191 | | 192 | */ 193 | 194 | 'lock_subject' => true, 195 | 196 | /* 197 | |-------------------------------------------------------------------------- 198 | | Leeway 199 | |-------------------------------------------------------------------------- 200 | | 201 | | This property gives the jwt timestamp claims some "leeway". 202 | | Meaning that if you have any unavoidable slight clock skew on 203 | | any of your servers then this will afford you some level of cushioning. 204 | | 205 | | This applies to the claims `iat`, `nbf` and `exp`. 206 | | 207 | | Specify in seconds - only if you know you need it. 208 | | 209 | */ 210 | 211 | 'leeway' => env('JWT_LEEWAY', 0), 212 | 213 | /* 214 | |-------------------------------------------------------------------------- 215 | | Blacklist Enabled 216 | |-------------------------------------------------------------------------- 217 | | 218 | | In order to invalidate tokens, you must have the blacklist enabled. 219 | | If you do not want or need this functionality, then set this to false. 220 | | 221 | */ 222 | 223 | 'blacklist_enabled' => env('JWT_BLACKLIST_ENABLED', true), 224 | 225 | /* 226 | | ------------------------------------------------------------------------- 227 | | Blacklist Grace Period 228 | | ------------------------------------------------------------------------- 229 | | 230 | | When multiple concurrent requests are made with the same JWT, 231 | | it is possible that some of them fail, due to token regeneration 232 | | on every request. 233 | | 234 | | Set grace period in seconds to prevent parallel request failure. 235 | | 236 | */ 237 | 238 | 'blacklist_grace_period' => env('JWT_BLACKLIST_GRACE_PERIOD', 0), 239 | 240 | /* 241 | |-------------------------------------------------------------------------- 242 | | Cookies encryption 243 | |-------------------------------------------------------------------------- 244 | | 245 | | By default Laravel encrypt cookies for security reason. 246 | | If you decide to not decrypt cookies, you will have to configure Laravel 247 | | to not encrypt your cookie token by adding its name into the $except 248 | | array available in the middleware "EncryptCookies" provided by Laravel. 249 | | see https://laravel.com/docs/master/responses#cookies-and-encryption 250 | | for details. 251 | | 252 | | Set it to true if you want to decrypt cookies. 253 | | 254 | */ 255 | 256 | 'decrypt_cookies' => false, 257 | 258 | /* 259 | |-------------------------------------------------------------------------- 260 | | Providers 261 | |-------------------------------------------------------------------------- 262 | | 263 | | Specify the various providers used throughout the package. 264 | | 265 | */ 266 | 267 | 'providers' => [ 268 | 269 | /* 270 | |-------------------------------------------------------------------------- 271 | | JWT Provider 272 | |-------------------------------------------------------------------------- 273 | | 274 | | Specify the provider that is used to create and decode the tokens. 275 | | 276 | */ 277 | 278 | 'jwt' => Tymon\JWTAuth\Providers\JWT\Lcobucci::class, 279 | 280 | /* 281 | |-------------------------------------------------------------------------- 282 | | Authentication Provider 283 | |-------------------------------------------------------------------------- 284 | | 285 | | Specify the provider that is used to authenticate users. 286 | | 287 | */ 288 | 289 | 'auth' => Tymon\JWTAuth\Providers\Auth\Illuminate::class, 290 | 291 | /* 292 | |-------------------------------------------------------------------------- 293 | | Storage Provider 294 | |-------------------------------------------------------------------------- 295 | | 296 | | Specify the provider that is used to store tokens in the blacklist. 297 | | 298 | */ 299 | 300 | 'storage' => Tymon\JWTAuth\Providers\Storage\Illuminate::class, 301 | 302 | ], 303 | 304 | ]; 305 | -------------------------------------------------------------------------------- /config/logging.php: -------------------------------------------------------------------------------- 1 | env('LOG_CHANNEL', 'stack'), 20 | 21 | /* 22 | |-------------------------------------------------------------------------- 23 | | Log Channels 24 | |-------------------------------------------------------------------------- 25 | | 26 | | Here you may configure the log channels for your application. Out of 27 | | the box, Laravel uses the Monolog PHP logging library. This gives 28 | | you a variety of powerful log handlers / formatters to utilize. 29 | | 30 | | Available Drivers: "single", "daily", "slack", "syslog", 31 | | "errorlog", "monolog", 32 | | "custom", "stack" 33 | | 34 | */ 35 | 36 | 'channels' => [ 37 | 'stack' => [ 38 | 'driver' => 'stack', 39 | 'channels' => ['daily'], 40 | ], 41 | 42 | 'single' => [ 43 | 'driver' => 'single', 44 | 'path' => storage_path('logs/laravel.log'), 45 | 'level' => 'debug', 46 | ], 47 | 48 | 'daily' => [ 49 | 'driver' => 'daily', 50 | 'path' => storage_path('logs/laravel.log'), 51 | 'level' => 'debug', 52 | 'days' => 14, 53 | ], 54 | 55 | 'slack' => [ 56 | 'driver' => 'slack', 57 | 'url' => env('LOG_SLACK_WEBHOOK_URL'), 58 | 'username' => 'Laravel Log', 59 | 'emoji' => ':boom:', 60 | 'level' => 'critical', 61 | ], 62 | 63 | 'papertrail' => [ 64 | 'driver' => 'monolog', 65 | 'level' => 'debug', 66 | 'handler' => SyslogUdpHandler::class, 67 | 'handler_with' => [ 68 | 'host' => env('PAPERTRAIL_URL'), 69 | 'port' => env('PAPERTRAIL_PORT'), 70 | ], 71 | ], 72 | 73 | 'stderr' => [ 74 | 'driver' => 'monolog', 75 | 'handler' => StreamHandler::class, 76 | 'formatter' => env('LOG_STDERR_FORMATTER'), 77 | 'with' => [ 78 | 'stream' => 'php://stderr', 79 | ], 80 | ], 81 | 82 | 'syslog' => [ 83 | 'driver' => 'syslog', 84 | 'level' => 'debug', 85 | ], 86 | 87 | 'errorlog' => [ 88 | 'driver' => 'errorlog', 89 | 'level' => 'debug', 90 | ], 91 | ], 92 | 93 | ]; 94 | -------------------------------------------------------------------------------- /config/mail.php: -------------------------------------------------------------------------------- 1 | env('MAIL_DRIVER', 'smtp'), 20 | 21 | /* 22 | |-------------------------------------------------------------------------- 23 | | SMTP Host Address 24 | |-------------------------------------------------------------------------- 25 | | 26 | | Here you may provide the host address of the SMTP server used by your 27 | | applications. A default option is provided that is compatible with 28 | | the Mailgun mail service which will provide reliable deliveries. 29 | | 30 | */ 31 | 32 | 'host' => env('MAIL_HOST', 'smtp.mailgun.org'), 33 | 34 | /* 35 | |-------------------------------------------------------------------------- 36 | | SMTP Host Port 37 | |-------------------------------------------------------------------------- 38 | | 39 | | This is the SMTP port used by your application to deliver e-mails to 40 | | users of the application. Like the host we have set this value to 41 | | stay compatible with the Mailgun e-mail application by default. 42 | | 43 | */ 44 | 45 | 'port' => env('MAIL_PORT', 587), 46 | 47 | /* 48 | |-------------------------------------------------------------------------- 49 | | Global "From" Address 50 | |-------------------------------------------------------------------------- 51 | | 52 | | You may wish for all e-mails sent by your application to be sent from 53 | | the same address. Here, you may specify a name and address that is 54 | | used globally for all e-mails that are sent by your application. 55 | | 56 | */ 57 | 58 | 'from' => [ 59 | 'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'), 60 | 'name' => env('MAIL_FROM_NAME', 'Example'), 61 | ], 62 | 63 | /* 64 | |-------------------------------------------------------------------------- 65 | | E-Mail Encryption Protocol 66 | |-------------------------------------------------------------------------- 67 | | 68 | | Here you may specify the encryption protocol that should be used when 69 | | the application send e-mail messages. A sensible default using the 70 | | transport layer security protocol should provide great security. 71 | | 72 | */ 73 | 74 | 'encryption' => env('MAIL_ENCRYPTION', 'tls'), 75 | 76 | /* 77 | |-------------------------------------------------------------------------- 78 | | SMTP Server Username 79 | |-------------------------------------------------------------------------- 80 | | 81 | | If your SMTP server requires a username for authentication, you should 82 | | set it here. This will get used to authenticate with your server on 83 | | connection. You may also set the "password" value below this one. 84 | | 85 | */ 86 | 87 | 'username' => env('MAIL_USERNAME'), 88 | 89 | 'password' => env('MAIL_PASSWORD'), 90 | 91 | /* 92 | |-------------------------------------------------------------------------- 93 | | Sendmail System Path 94 | |-------------------------------------------------------------------------- 95 | | 96 | | When using the "sendmail" driver to send e-mails, we will need to know 97 | | the path to where Sendmail lives on this server. A default path has 98 | | been provided here, which will work well on most of your systems. 99 | | 100 | */ 101 | 102 | 'sendmail' => '/usr/sbin/sendmail -bs', 103 | 104 | /* 105 | |-------------------------------------------------------------------------- 106 | | Markdown Mail Settings 107 | |-------------------------------------------------------------------------- 108 | | 109 | | If you are using Markdown based email rendering, you may configure your 110 | | theme and component paths here, allowing you to customize the design 111 | | of the emails. Or, you may simply stick with the Laravel defaults! 112 | | 113 | */ 114 | 115 | 'markdown' => [ 116 | 'theme' => 'default', 117 | 118 | 'paths' => [ 119 | resource_path('views/vendor/mail'), 120 | ], 121 | ], 122 | 123 | /* 124 | |-------------------------------------------------------------------------- 125 | | Log Channel 126 | |-------------------------------------------------------------------------- 127 | | 128 | | If you are using the "log" driver, you may specify the logging channel 129 | | if you prefer to keep mail messages separate from other log entries 130 | | for simpler reading. Otherwise, the default channel will be used. 131 | | 132 | */ 133 | 134 | 'log_channel' => env('MAIL_LOG_CHANNEL'), 135 | 136 | ]; 137 | -------------------------------------------------------------------------------- /config/queue.php: -------------------------------------------------------------------------------- 1 | env('QUEUE_CONNECTION', 'sync'), 17 | 18 | /* 19 | |-------------------------------------------------------------------------- 20 | | Queue Connections 21 | |-------------------------------------------------------------------------- 22 | | 23 | | Here you may configure the connection information for each server that 24 | | is used by your application. A default configuration has been added 25 | | for each back-end shipped with Laravel. You are free to add more. 26 | | 27 | | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null" 28 | | 29 | */ 30 | 31 | 'connections' => [ 32 | 33 | 'sync' => [ 34 | 'driver' => 'sync', 35 | ], 36 | 37 | 'database' => [ 38 | 'driver' => 'database', 39 | 'table' => 'jobs', 40 | 'queue' => 'default', 41 | 'retry_after' => 90, 42 | ], 43 | 44 | 'beanstalkd' => [ 45 | 'driver' => 'beanstalkd', 46 | 'host' => 'localhost', 47 | 'queue' => 'default', 48 | 'retry_after' => 90, 49 | ], 50 | 51 | 'sqs' => [ 52 | 'driver' => 'sqs', 53 | 'key' => env('SQS_KEY', 'your-public-key'), 54 | 'secret' => env('SQS_SECRET', 'your-secret-key'), 55 | 'prefix' => env('SQS_PREFIX', 'https://sqs.us-east-1.amazonaws.com/your-account-id'), 56 | 'queue' => env('SQS_QUEUE', 'your-queue-name'), 57 | 'region' => env('SQS_REGION', 'us-east-1'), 58 | ], 59 | 60 | 'redis' => [ 61 | 'driver' => 'redis', 62 | 'connection' => 'default', 63 | 'queue' => env('REDIS_QUEUE', 'default'), 64 | 'retry_after' => 90, 65 | 'block_for' => null, 66 | ], 67 | 68 | ], 69 | 70 | /* 71 | |-------------------------------------------------------------------------- 72 | | Failed Queue Jobs 73 | |-------------------------------------------------------------------------- 74 | | 75 | | These options configure the behavior of failed queue job logging so you 76 | | can control which database and table are used to store the jobs that 77 | | have failed. You may change them to any database / table you wish. 78 | | 79 | */ 80 | 81 | 'failed' => [ 82 | 'database' => env('DB_CONNECTION', 'mysql'), 83 | 'table' => 'failed_jobs', 84 | ], 85 | 86 | ]; 87 | -------------------------------------------------------------------------------- /config/services.php: -------------------------------------------------------------------------------- 1 | [ 18 | 'domain' => env('MAILGUN_DOMAIN'), 19 | 'secret' => env('MAILGUN_SECRET'), 20 | 'endpoint' => env('MAILGUN_ENDPOINT', 'api.mailgun.net'), 21 | ], 22 | 23 | 'ses' => [ 24 | 'key' => env('SES_KEY'), 25 | 'secret' => env('SES_SECRET'), 26 | 'region' => env('SES_REGION', 'us-east-1'), 27 | ], 28 | 29 | 'sparkpost' => [ 30 | 'secret' => env('SPARKPOST_SECRET'), 31 | ], 32 | 33 | 'stripe' => [ 34 | 'model' => App\Models\User::class, 35 | 'key' => env('STRIPE_KEY'), 36 | 'secret' => env('STRIPE_SECRET'), 37 | 'webhook' => [ 38 | 'secret' => env('STRIPE_WEBHOOK_SECRET'), 39 | 'tolerance' => env('STRIPE_WEBHOOK_TOLERANCE', 300), 40 | ], 41 | ], 42 | 43 | ]; 44 | -------------------------------------------------------------------------------- /config/session.php: -------------------------------------------------------------------------------- 1 | env('SESSION_DRIVER', 'file'), 22 | 23 | /* 24 | |-------------------------------------------------------------------------- 25 | | Session Lifetime 26 | |-------------------------------------------------------------------------- 27 | | 28 | | Here you may specify the number of minutes that you wish the session 29 | | to be allowed to remain idle before it expires. If you want them 30 | | to immediately expire on the browser closing, set that option. 31 | | 32 | */ 33 | 34 | 'lifetime' => env('SESSION_LIFETIME', 120), 35 | 36 | 'expire_on_close' => false, 37 | 38 | /* 39 | |-------------------------------------------------------------------------- 40 | | Session Encryption 41 | |-------------------------------------------------------------------------- 42 | | 43 | | This option allows you to easily specify that all of your session data 44 | | should be encrypted before it is stored. All encryption will be run 45 | | automatically by Laravel and you can use the Session like normal. 46 | | 47 | */ 48 | 49 | 'encrypt' => false, 50 | 51 | /* 52 | |-------------------------------------------------------------------------- 53 | | Session File Location 54 | |-------------------------------------------------------------------------- 55 | | 56 | | When using the native session driver, we need a location where session 57 | | files may be stored. A default has been set for you but a different 58 | | location may be specified. This is only needed for file sessions. 59 | | 60 | */ 61 | 62 | 'files' => storage_path('framework/sessions'), 63 | 64 | /* 65 | |-------------------------------------------------------------------------- 66 | | Session Database Connection 67 | |-------------------------------------------------------------------------- 68 | | 69 | | When using the "database" or "redis" session drivers, you may specify a 70 | | connection that should be used to manage these sessions. This should 71 | | correspond to a connection in your database configuration options. 72 | | 73 | */ 74 | 75 | 'connection' => env('SESSION_CONNECTION', null), 76 | 77 | /* 78 | |-------------------------------------------------------------------------- 79 | | Session Database Table 80 | |-------------------------------------------------------------------------- 81 | | 82 | | When using the "database" session driver, you may specify the table we 83 | | should use to manage the sessions. Of course, a sensible default is 84 | | provided for you; however, you are free to change this as needed. 85 | | 86 | */ 87 | 88 | 'table' => 'sessions', 89 | 90 | /* 91 | |-------------------------------------------------------------------------- 92 | | Session Cache Store 93 | |-------------------------------------------------------------------------- 94 | | 95 | | When using the "apc" or "memcached" session drivers, you may specify a 96 | | cache store that should be used for these sessions. This value must 97 | | correspond with one of the application's configured cache stores. 98 | | 99 | */ 100 | 101 | 'store' => env('SESSION_STORE', null), 102 | 103 | /* 104 | |-------------------------------------------------------------------------- 105 | | Session Sweeping Lottery 106 | |-------------------------------------------------------------------------- 107 | | 108 | | Some session drivers must manually sweep their storage location to get 109 | | rid of old sessions from storage. Here are the chances that it will 110 | | happen on a given request. By default, the odds are 2 out of 100. 111 | | 112 | */ 113 | 114 | 'lottery' => [2, 100], 115 | 116 | /* 117 | |-------------------------------------------------------------------------- 118 | | Session Cookie Name 119 | |-------------------------------------------------------------------------- 120 | | 121 | | Here you may change the name of the cookie used to identify a session 122 | | instance by ID. The name specified here will get used every time a 123 | | new session cookie is created by the framework for every driver. 124 | | 125 | */ 126 | 127 | 'cookie' => env( 128 | 'SESSION_COOKIE', 129 | Str::slug(env('APP_NAME', 'laravel'), '_').'_session' 130 | ), 131 | 132 | /* 133 | |-------------------------------------------------------------------------- 134 | | Session Cookie Path 135 | |-------------------------------------------------------------------------- 136 | | 137 | | The session cookie path determines the path for which the cookie will 138 | | be regarded as available. Typically, this will be the root path of 139 | | your application but you are free to change this when necessary. 140 | | 141 | */ 142 | 143 | 'path' => '/', 144 | 145 | /* 146 | |-------------------------------------------------------------------------- 147 | | Session Cookie Domain 148 | |-------------------------------------------------------------------------- 149 | | 150 | | Here you may change the domain of the cookie used to identify a session 151 | | in your application. This will determine which domains the cookie is 152 | | available to in your application. A sensible default has been set. 153 | | 154 | */ 155 | 156 | 'domain' => env('SESSION_DOMAIN', null), 157 | 158 | /* 159 | |-------------------------------------------------------------------------- 160 | | HTTPS Only Cookies 161 | |-------------------------------------------------------------------------- 162 | | 163 | | By setting this option to true, session cookies will only be sent back 164 | | to the server if the browser has a HTTPS connection. This will keep 165 | | the cookie from being sent to you if it can not be done securely. 166 | | 167 | */ 168 | 169 | 'secure' => env('SESSION_SECURE_COOKIE', false), 170 | 171 | /* 172 | |-------------------------------------------------------------------------- 173 | | HTTP Access Only 174 | |-------------------------------------------------------------------------- 175 | | 176 | | Setting this value to true will prevent JavaScript from accessing the 177 | | value of the cookie and the cookie will only be accessible through 178 | | the HTTP protocol. You are free to modify this option if needed. 179 | | 180 | */ 181 | 182 | 'http_only' => true, 183 | 184 | /* 185 | |-------------------------------------------------------------------------- 186 | | Same-Site Cookies 187 | |-------------------------------------------------------------------------- 188 | | 189 | | This option determines how your cookies behave when cross-site requests 190 | | take place, and can be used to mitigate CSRF attacks. By default, we 191 | | do not enable this as other CSRF protection services are in place. 192 | | 193 | | Supported: "lax", "strict" 194 | | 195 | */ 196 | 197 | 'same_site' => null, 198 | 199 | ]; 200 | -------------------------------------------------------------------------------- /config/view.php: -------------------------------------------------------------------------------- 1 | [ 17 | resource_path('views'), 18 | ], 19 | 20 | /* 21 | |-------------------------------------------------------------------------- 22 | | Compiled View Path 23 | |-------------------------------------------------------------------------- 24 | | 25 | | This option determines where all the compiled Blade templates will be 26 | | stored for your application. Typically, this is within the storage 27 | | directory. However, as usual, you are free to change this value. 28 | | 29 | */ 30 | 31 | 'compiled' => env( 32 | 'VIEW_COMPILED_PATH', 33 | realpath(storage_path('framework/views')) 34 | ), 35 | 36 | ]; 37 | -------------------------------------------------------------------------------- /database/.gitignore: -------------------------------------------------------------------------------- 1 | *.sqlite 2 | -------------------------------------------------------------------------------- /database/factories/UserFactory.php: -------------------------------------------------------------------------------- 1 | define(App\Models\User::class, function (Faker $faker) { 17 | return [ 18 | 'name' => $faker->name, 19 | 'email' => $faker->unique()->safeEmail, 20 | 'email_verified_at' => now(), 21 | 'password' => '$2y$10$TKh8H1.PfQx37YgCzwiKb.KjNyWgaHb9cbcoQgdIVFlYg7B77UdFm', // secret 22 | 'remember_token' => str_random(10), 23 | ]; 24 | }); 25 | -------------------------------------------------------------------------------- /database/migrations/2014_10_12_000000_create_users_table.php: -------------------------------------------------------------------------------- 1 | increments('id')->comment('主键ID'); 18 | $table->string('name',12)->unique()->comment('用户名称'); 19 | $table->string('password',80)->comment('密码'); 20 | $table->text('last_token')->nullable()->comment('登陆时的token'); 21 | $table->tinyInteger('status')->default(0)->comment('用户状态 -1代表已删除 0代表正常 1代表冻结'); 22 | $table->timestamps(); 23 | }); 24 | } 25 | 26 | /** 27 | * Reverse the migrations. 28 | * 29 | * @return void 30 | */ 31 | public function down() 32 | { 33 | Schema::dropIfExists('users'); 34 | } 35 | } 36 | -------------------------------------------------------------------------------- /database/migrations/2019_03_01_064314_create_admins_table.php: -------------------------------------------------------------------------------- 1 | increments('id')->comment('主键ID'); 18 | $table->string('name',12)->unique()->comment('用户名称'); 19 | $table->string('password',80)->comment('密码'); 20 | $table->text('last_token')->nullable()->comment('登陆时的token'); 21 | $table->tinyInteger('status')->default(0)->comment('用户状态 -1代表已删除 0代表正常 1代表冻结'); 22 | $table->timestamps(); 23 | }); 24 | } 25 | 26 | /** 27 | * Reverse the migrations. 28 | * 29 | * @return void 30 | */ 31 | public function down() 32 | { 33 | Schema::dropIfExists('admins'); 34 | } 35 | } 36 | -------------------------------------------------------------------------------- /database/seeds/DatabaseSeeder.php: -------------------------------------------------------------------------------- 1 | call(UsersTableSeeder::class); 15 | for($i=1;$i<=2;$i++){ 16 | DB::table('users')->insert([ 17 | 'name' => 'guaosi'.$i, 18 | 'password' => bcrypt('12345678'), 19 | ]); 20 | DB::table('admins')->insert([ 21 | 'name' => 'guaosi'.(122+$i), 22 | 'password' => bcrypt('12345678'), 23 | ]); 24 | } 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- 1 | { 2 | "private": true, 3 | "scripts": { 4 | "dev": "npm run development", 5 | "development": "cross-env NODE_ENV=development node_modules/webpack/bin/webpack.js --progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js", 6 | "watch": "npm run development -- --watch", 7 | "watch-poll": "npm run watch -- --watch-poll", 8 | "hot": "cross-env NODE_ENV=development node_modules/webpack-dev-server/bin/webpack-dev-server.js --inline --hot --config=node_modules/laravel-mix/setup/webpack.config.js", 9 | "prod": "npm run production", 10 | "production": "cross-env NODE_ENV=production node_modules/webpack/bin/webpack.js --no-progress --hide-modules --config=node_modules/laravel-mix/setup/webpack.config.js" 11 | }, 12 | "devDependencies": { 13 | "axios": "^0.18", 14 | "bootstrap": "^4.0.0", 15 | "cross-env": "^5.1", 16 | "jquery": "^3.2", 17 | "laravel-mix": "^4.0.7", 18 | "lodash": "^4.17.5", 19 | "popper.js": "^1.12", 20 | "resolve-url-loader": "^2.3.1", 21 | "sass": "^1.15.2", 22 | "sass-loader": "^7.1.0", 23 | "vue": "^2.5.17" 24 | } 25 | } 26 | -------------------------------------------------------------------------------- /phpunit.xml: -------------------------------------------------------------------------------- 1 | 2 | 11 | 12 | 13 | ./tests/Unit 14 | 15 | 16 | 17 | ./tests/Feature 18 | 19 | 20 | 21 | 22 | ./app 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | -------------------------------------------------------------------------------- /public/.htaccess: -------------------------------------------------------------------------------- 1 | 2 | 3 | Options -MultiViews -Indexes 4 | 5 | 6 | RewriteEngine On 7 | 8 | # Handle Authorization Header 9 | RewriteCond %{HTTP:Authorization} . 10 | RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] 11 | 12 | # Redirect Trailing Slashes If Not A Folder... 13 | RewriteCond %{REQUEST_FILENAME} !-d 14 | RewriteCond %{REQUEST_URI} (.+)/$ 15 | RewriteRule ^ %1 [L,R=301] 16 | 17 | # Handle Front Controller... 18 | RewriteCond %{REQUEST_FILENAME} !-d 19 | RewriteCond %{REQUEST_FILENAME} !-f 20 | RewriteRule ^ index.php [L] 21 | 22 | -------------------------------------------------------------------------------- /public/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/santa70916112/laravelapi/9f8e1efd48bf70e24ccfc63505cd03d5b912a590/public/favicon.ico -------------------------------------------------------------------------------- /public/index.php: -------------------------------------------------------------------------------- 1 | 8 | */ 9 | 10 | define('LARAVEL_START', microtime(true)); 11 | 12 | /* 13 | |-------------------------------------------------------------------------- 14 | | Register The Auto Loader 15 | |-------------------------------------------------------------------------- 16 | | 17 | | Composer provides a convenient, automatically generated class loader for 18 | | our application. We just need to utilize it! We'll simply require it 19 | | into the script here so that we don't have to worry about manual 20 | | loading any of our classes later on. It feels great to relax. 21 | | 22 | */ 23 | 24 | require __DIR__.'/../vendor/autoload.php'; 25 | 26 | /* 27 | |-------------------------------------------------------------------------- 28 | | Turn On The Lights 29 | |-------------------------------------------------------------------------- 30 | | 31 | | We need to illuminate PHP development, so let us turn on the lights. 32 | | This bootstraps the framework and gets it ready for use, then it 33 | | will load up this application so that we can run it and send 34 | | the responses back to the browser and delight our users. 35 | | 36 | */ 37 | 38 | $app = require_once __DIR__.'/../bootstrap/app.php'; 39 | 40 | /* 41 | |-------------------------------------------------------------------------- 42 | | Run The Application 43 | |-------------------------------------------------------------------------- 44 | | 45 | | Once we have the application, we can handle the incoming request 46 | | through the kernel, and send the associated response back to 47 | | the client's browser allowing them to enjoy the creative 48 | | and wonderful application we have prepared for them. 49 | | 50 | */ 51 | 52 | $kernel = $app->make(Illuminate\Contracts\Http\Kernel::class); 53 | 54 | $response = $kernel->handle( 55 | $request = Illuminate\Http\Request::capture() 56 | ); 57 | 58 | $response->send(); 59 | 60 | $kernel->terminate($request, $response); 61 | -------------------------------------------------------------------------------- /public/robots.txt: -------------------------------------------------------------------------------- 1 | User-agent: * 2 | Disallow: 3 | -------------------------------------------------------------------------------- /public/svg/403.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /public/svg/404.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /public/svg/500.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /public/svg/503.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /public/vendor/horizon/css/app.css.map: -------------------------------------------------------------------------------- 1 | {"version":3,"file":"/css/app.css","sources":[],"mappings":";;;;;A","sourceRoot":""} -------------------------------------------------------------------------------- /public/vendor/horizon/img/favicon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/santa70916112/laravelapi/9f8e1efd48bf70e24ccfc63505cd03d5b912a590/public/vendor/horizon/img/favicon.png -------------------------------------------------------------------------------- /public/vendor/horizon/img/horizon.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /public/vendor/horizon/mix-manifest.json: -------------------------------------------------------------------------------- 1 | { 2 | "/app.js": "/app.js?id=fb7fa0b0532e2ebb68df", 3 | "/app.css": "/app.css?id=cefed9132a927b70fdd6", 4 | "/app-dark.css": "/app-dark.css?id=596688837e7ffbb58e37" 5 | } 6 | -------------------------------------------------------------------------------- /public/web.config: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | -------------------------------------------------------------------------------- /readme.md: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /resources/js/app.js: -------------------------------------------------------------------------------- 1 | 2 | /** 3 | * First we will load all of this project's JavaScript dependencies which 4 | * includes Vue and other libraries. It is a great starting point when 5 | * building robust, powerful web applications using Vue and Laravel. 6 | */ 7 | 8 | require('./bootstrap'); 9 | 10 | window.Vue = require('vue'); 11 | 12 | /** 13 | * The following block of code may be used to automatically register your 14 | * Vue components. It will recursively scan this directory for the Vue 15 | * components and automatically register them with their "basename". 16 | * 17 | * Eg. ./components/ExampleComponent.vue -> 18 | */ 19 | 20 | // const files = require.context('./', true, /\.vue$/i) 21 | // files.keys().map(key => Vue.component(key.split('/').pop().split('.')[0], files(key).default)) 22 | 23 | Vue.component('example-component', require('./components/ExampleComponent.vue').default); 24 | 25 | /** 26 | * Next, we will create a fresh Vue application instance and attach it to 27 | * the page. Then, you may begin adding components to this application 28 | * or customize the JavaScript scaffolding to fit your unique needs. 29 | */ 30 | 31 | const app = new Vue({ 32 | el: '#app' 33 | }); 34 | -------------------------------------------------------------------------------- /resources/js/bootstrap.js: -------------------------------------------------------------------------------- 1 | 2 | window._ = require('lodash'); 3 | 4 | /** 5 | * We'll load jQuery and the Bootstrap jQuery plugin which provides support 6 | * for JavaScript based Bootstrap features such as modals and tabs. This 7 | * code may be modified to fit the specific needs of your application. 8 | */ 9 | 10 | try { 11 | window.Popper = require('popper.js').default; 12 | window.$ = window.jQuery = require('jquery'); 13 | 14 | require('bootstrap'); 15 | } catch (e) {} 16 | 17 | /** 18 | * We'll load the axios HTTP library which allows us to easily issue requests 19 | * to our Laravel back-end. This library automatically handles sending the 20 | * CSRF token as a header based on the value of the "XSRF" token cookie. 21 | */ 22 | 23 | window.axios = require('axios'); 24 | 25 | window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest'; 26 | 27 | /** 28 | * Next we will register the CSRF Token as a common header with Axios so that 29 | * all outgoing HTTP requests automatically have it attached. This is just 30 | * a simple convenience so we don't have to attach every token manually. 31 | */ 32 | 33 | let token = document.head.querySelector('meta[name="csrf-token"]'); 34 | 35 | if (token) { 36 | window.axios.defaults.headers.common['X-CSRF-TOKEN'] = token.content; 37 | } else { 38 | console.error('CSRF token not found: https://laravel.com/docs/csrf#csrf-x-csrf-token'); 39 | } 40 | 41 | /** 42 | * Echo exposes an expressive API for subscribing to channels and listening 43 | * for events that are broadcast by Laravel. Echo and event broadcasting 44 | * allows your team to easily build robust real-time web applications. 45 | */ 46 | 47 | // import Echo from 'laravel-echo' 48 | 49 | // window.Pusher = require('pusher-js'); 50 | 51 | // window.Echo = new Echo({ 52 | // broadcaster: 'pusher', 53 | // key: process.env.MIX_PUSHER_APP_KEY, 54 | // cluster: process.env.MIX_PUSHER_APP_CLUSTER, 55 | // encrypted: true 56 | // }); 57 | -------------------------------------------------------------------------------- /resources/js/components/ExampleComponent.vue: -------------------------------------------------------------------------------- 1 | 16 | 17 | 24 | -------------------------------------------------------------------------------- /resources/lang/en/auth.php: -------------------------------------------------------------------------------- 1 | 'These credentials do not match our records.', 17 | 'throttle' => 'Too many login attempts. Please try again in :seconds seconds.', 18 | 19 | ]; 20 | -------------------------------------------------------------------------------- /resources/lang/en/pagination.php: -------------------------------------------------------------------------------- 1 | '« Previous', 17 | 'next' => 'Next »', 18 | 19 | ]; 20 | -------------------------------------------------------------------------------- /resources/lang/en/passwords.php: -------------------------------------------------------------------------------- 1 | 'Passwords must be at least six characters and match the confirmation.', 17 | 'reset' => 'Your password has been reset!', 18 | 'sent' => 'We have e-mailed your password reset link!', 19 | 'token' => 'This password reset token is invalid.', 20 | 'user' => "We can't find a user with that e-mail address.", 21 | 22 | ]; 23 | -------------------------------------------------------------------------------- /resources/lang/en/validation.php: -------------------------------------------------------------------------------- 1 | 'The :attribute must be accepted.', 17 | 'active_url' => 'The :attribute is not a valid URL.', 18 | 'after' => 'The :attribute must be a date after :date.', 19 | 'after_or_equal' => 'The :attribute must be a date after or equal to :date.', 20 | 'alpha' => 'The :attribute may only contain letters.', 21 | 'alpha_dash' => 'The :attribute may only contain letters, numbers, dashes and underscores.', 22 | 'alpha_num' => 'The :attribute may only contain letters and numbers.', 23 | 'array' => 'The :attribute must be an array.', 24 | 'before' => 'The :attribute must be a date before :date.', 25 | 'before_or_equal' => 'The :attribute must be a date before or equal to :date.', 26 | 'between' => [ 27 | 'numeric' => 'The :attribute must be between :min and :max.', 28 | 'file' => 'The :attribute must be between :min and :max kilobytes.', 29 | 'string' => 'The :attribute must be between :min and :max characters.', 30 | 'array' => 'The :attribute must have between :min and :max items.', 31 | ], 32 | 'boolean' => 'The :attribute field must be true or false.', 33 | 'confirmed' => 'The :attribute confirmation does not match.', 34 | 'date' => 'The :attribute is not a valid date.', 35 | 'date_equals' => 'The :attribute must be a date equal to :date.', 36 | 'date_format' => 'The :attribute does not match the format :format.', 37 | 'different' => 'The :attribute and :other must be different.', 38 | 'digits' => 'The :attribute must be :digits digits.', 39 | 'digits_between' => 'The :attribute must be between :min and :max digits.', 40 | 'dimensions' => 'The :attribute has invalid image dimensions.', 41 | 'distinct' => 'The :attribute field has a duplicate value.', 42 | 'email' => 'The :attribute must be a valid email address.', 43 | 'exists' => 'The selected :attribute is invalid.', 44 | 'file' => 'The :attribute must be a file.', 45 | 'filled' => 'The :attribute field must have a value.', 46 | 'gt' => [ 47 | 'numeric' => 'The :attribute must be greater than :value.', 48 | 'file' => 'The :attribute must be greater than :value kilobytes.', 49 | 'string' => 'The :attribute must be greater than :value characters.', 50 | 'array' => 'The :attribute must have more than :value items.', 51 | ], 52 | 'gte' => [ 53 | 'numeric' => 'The :attribute must be greater than or equal :value.', 54 | 'file' => 'The :attribute must be greater than or equal :value kilobytes.', 55 | 'string' => 'The :attribute must be greater than or equal :value characters.', 56 | 'array' => 'The :attribute must have :value items or more.', 57 | ], 58 | 'image' => 'The :attribute must be an image.', 59 | 'in' => 'The selected :attribute is invalid.', 60 | 'in_array' => 'The :attribute field does not exist in :other.', 61 | 'integer' => 'The :attribute must be an integer.', 62 | 'ip' => 'The :attribute must be a valid IP address.', 63 | 'ipv4' => 'The :attribute must be a valid IPv4 address.', 64 | 'ipv6' => 'The :attribute must be a valid IPv6 address.', 65 | 'json' => 'The :attribute must be a valid JSON string.', 66 | 'lt' => [ 67 | 'numeric' => 'The :attribute must be less than :value.', 68 | 'file' => 'The :attribute must be less than :value kilobytes.', 69 | 'string' => 'The :attribute must be less than :value characters.', 70 | 'array' => 'The :attribute must have less than :value items.', 71 | ], 72 | 'lte' => [ 73 | 'numeric' => 'The :attribute must be less than or equal :value.', 74 | 'file' => 'The :attribute must be less than or equal :value kilobytes.', 75 | 'string' => 'The :attribute must be less than or equal :value characters.', 76 | 'array' => 'The :attribute must not have more than :value items.', 77 | ], 78 | 'max' => [ 79 | 'numeric' => 'The :attribute may not be greater than :max.', 80 | 'file' => 'The :attribute may not be greater than :max kilobytes.', 81 | 'string' => 'The :attribute may not be greater than :max characters.', 82 | 'array' => 'The :attribute may not have more than :max items.', 83 | ], 84 | 'mimes' => 'The :attribute must be a file of type: :values.', 85 | 'mimetypes' => 'The :attribute must be a file of type: :values.', 86 | 'min' => [ 87 | 'numeric' => 'The :attribute must be at least :min.', 88 | 'file' => 'The :attribute must be at least :min kilobytes.', 89 | 'string' => 'The :attribute must be at least :min characters.', 90 | 'array' => 'The :attribute must have at least :min items.', 91 | ], 92 | 'not_in' => 'The selected :attribute is invalid.', 93 | 'not_regex' => 'The :attribute format is invalid.', 94 | 'numeric' => 'The :attribute must be a number.', 95 | 'present' => 'The :attribute field must be present.', 96 | 'regex' => 'The :attribute format is invalid.', 97 | 'required' => 'The :attribute field is required.', 98 | 'required_if' => 'The :attribute field is required when :other is :value.', 99 | 'required_unless' => 'The :attribute field is required unless :other is in :values.', 100 | 'required_with' => 'The :attribute field is required when :values is present.', 101 | 'required_with_all' => 'The :attribute field is required when :values are present.', 102 | 'required_without' => 'The :attribute field is required when :values is not present.', 103 | 'required_without_all' => 'The :attribute field is required when none of :values are present.', 104 | 'same' => 'The :attribute and :other must match.', 105 | 'size' => [ 106 | 'numeric' => 'The :attribute must be :size.', 107 | 'file' => 'The :attribute must be :size kilobytes.', 108 | 'string' => 'The :attribute must be :size characters.', 109 | 'array' => 'The :attribute must contain :size items.', 110 | ], 111 | 'starts_with' => 'The :attribute must start with one of the following: :values', 112 | 'string' => 'The :attribute must be a string.', 113 | 'timezone' => 'The :attribute must be a valid zone.', 114 | 'unique' => 'The :attribute has already been taken.', 115 | 'uploaded' => 'The :attribute failed to upload.', 116 | 'url' => 'The :attribute format is invalid.', 117 | 'uuid' => 'The :attribute must be a valid UUID.', 118 | 119 | /* 120 | |-------------------------------------------------------------------------- 121 | | Custom Validation Language Lines 122 | |-------------------------------------------------------------------------- 123 | | 124 | | Here you may specify custom validation messages for attributes using the 125 | | convention "attribute.rule" to name the lines. This makes it quick to 126 | | specify a specific custom language line for a given attribute rule. 127 | | 128 | */ 129 | 130 | 'custom' => [ 131 | 'attribute-name' => [ 132 | 'rule-name' => 'custom-message', 133 | ], 134 | ], 135 | 136 | /* 137 | |-------------------------------------------------------------------------- 138 | | Custom Validation Attributes 139 | |-------------------------------------------------------------------------- 140 | | 141 | | The following language lines are used to swap our attribute placeholder 142 | | with something more reader friendly such as "E-Mail Address" instead 143 | | of "email". This simply helps us make our message more expressive. 144 | | 145 | */ 146 | 147 | 'attributes' => [], 148 | 149 | ]; 150 | -------------------------------------------------------------------------------- /resources/sass/_variables.scss: -------------------------------------------------------------------------------- 1 | 2 | // Body 3 | $body-bg: #f8fafc; 4 | 5 | // Typography 6 | $font-family-sans-serif: "Nunito", sans-serif; 7 | $font-size-base: 0.9rem; 8 | $line-height-base: 1.6; 9 | 10 | // Colors 11 | $blue: #3490dc; 12 | $indigo: #6574cd; 13 | $purple: #9561e2; 14 | $pink: #f66D9b; 15 | $red: #e3342f; 16 | $orange: #f6993f; 17 | $yellow: #ffed4a; 18 | $green: #38c172; 19 | $teal: #4dc0b5; 20 | $cyan: #6cb2eb; 21 | -------------------------------------------------------------------------------- /resources/sass/app.scss: -------------------------------------------------------------------------------- 1 | 2 | // Fonts 3 | @import url('https://fonts.googleapis.com/css?family=Nunito'); 4 | 5 | // Variables 6 | @import 'variables'; 7 | 8 | // Bootstrap 9 | @import '~bootstrap/scss/bootstrap'; 10 | 11 | .navbar-laravel { 12 | background-color: #fff; 13 | box-shadow: 0 2px 4px rgba(0, 0, 0, 0.04); 14 | } 15 | -------------------------------------------------------------------------------- /resources/views/welcome.blade.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | Laravel 8 | 9 | 10 | 11 | 12 | 13 | 65 | 66 | 67 |
68 | @if (Route::has('login')) 69 |
70 | @auth 71 | Home 72 | @else 73 | Login 74 | 75 | @if (Route::has('register')) 76 | Register 77 | @endif 78 | @endauth 79 |
80 | @endif 81 | 82 |
83 |
84 | Laravel 85 |
86 | 87 |
88 | Documentation 89 | Laracasts 90 | News 91 | Nova 92 | Forge 93 | GitHub 94 |
95 |
96 |
97 | 98 | 99 | -------------------------------------------------------------------------------- /routes/api.php: -------------------------------------------------------------------------------- 1 | prefix('v1')->middleware('cors')->group(function () { 17 | Route::middleware('api.guard')->group(function () { 18 | //用户注册 19 | Route::post('/users', 'UserController@store')->name('users.store'); 20 | //用户登录 21 | Route::post('/login', 'UserController@login')->name('users.login'); 22 | 23 | Route::middleware('api.refresh')->group(function () { 24 | //当前用户信息 25 | Route::get('/users/info', 'UserController@info')->name('users.info'); 26 | //用户列表 27 | Route::get('/users', 'UserController@index')->name('users.index'); 28 | //用户信息 29 | Route::get('/users/{user}', 'UserController@show')->name('users.show'); 30 | //用户退出 31 | Route::get('/logout', 'UserController@logout')->name('users.logout'); 32 | }); 33 | }); 34 | Route::middleware('admin.guard')->group(function () { 35 | //管理员注册 36 | Route::post('/admins', 'AdminController@store')->name('admins.store'); 37 | //管理员登录 38 | Route::post('/admin/login', 'AdminController@login')->name('admins.login'); 39 | Route::middleware('api.refresh')->group(function () { 40 | //当前管理员信息 41 | Route::get('/admins/info', 'AdminController@info')->name('admins.info'); 42 | //管理员列表 43 | Route::get('/admins', 'AdminController@index')->name('admins.index'); 44 | //管理员信息 45 | Route::get('/admins/{user}', 'AdminController@show')->name('admins.show'); 46 | //管理员退出 47 | Route::get('/admins/logout', 'AdminController@logout')->name('admins.logout'); 48 | }); 49 | }); 50 | }); -------------------------------------------------------------------------------- /routes/channels.php: -------------------------------------------------------------------------------- 1 | id === (int) $id; 16 | }); 17 | -------------------------------------------------------------------------------- /routes/console.php: -------------------------------------------------------------------------------- 1 | comment(Inspiring::quote()); 18 | })->describe('Display an inspiring quote'); 19 | -------------------------------------------------------------------------------- /routes/web.php: -------------------------------------------------------------------------------- 1 | 8 | */ 9 | 10 | $uri = urldecode( 11 | parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH) 12 | ); 13 | 14 | // This file allows us to emulate Apache's "mod_rewrite" functionality from the 15 | // built-in PHP web server. This provides a convenient way to test a Laravel 16 | // application without having installed a "real" web server software here. 17 | if ($uri !== '/' && file_exists(__DIR__.'/public'.$uri)) { 18 | return false; 19 | } 20 | 21 | require_once __DIR__.'/public/index.php'; 22 | -------------------------------------------------------------------------------- /storage/app/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !public/ 3 | !.gitignore 4 | -------------------------------------------------------------------------------- /storage/app/public/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /storage/framework/.gitignore: -------------------------------------------------------------------------------- 1 | config.php 2 | routes.php 3 | schedule-* 4 | compiled.php 5 | services.json 6 | events.scanned.php 7 | routes.scanned.php 8 | down 9 | -------------------------------------------------------------------------------- /storage/framework/cache/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !data/ 3 | !.gitignore 4 | -------------------------------------------------------------------------------- /storage/framework/cache/data/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /storage/framework/sessions/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /storage/framework/testing/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /storage/framework/views/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /storage/logs/.gitignore: -------------------------------------------------------------------------------- 1 | * 2 | !.gitignore 3 | -------------------------------------------------------------------------------- /tests/CreatesApplication.php: -------------------------------------------------------------------------------- 1 | make(Kernel::class)->bootstrap(); 19 | 20 | return $app; 21 | } 22 | } 23 | -------------------------------------------------------------------------------- /tests/Feature/ExampleTest.php: -------------------------------------------------------------------------------- 1 | get('/'); 18 | 19 | $response->assertStatus(200); 20 | } 21 | } 22 | -------------------------------------------------------------------------------- /tests/TestCase.php: -------------------------------------------------------------------------------- 1 | assertTrue(true); 18 | } 19 | } 20 | -------------------------------------------------------------------------------- /webpack.mix.js: -------------------------------------------------------------------------------- 1 | const mix = require('laravel-mix'); 2 | 3 | /* 4 | |-------------------------------------------------------------------------- 5 | | Mix Asset Management 6 | |-------------------------------------------------------------------------- 7 | | 8 | | Mix provides a clean, fluent API for defining some Webpack build steps 9 | | for your Laravel application. By default, we are compiling the Sass 10 | | file for the application as well as bundling up all the JS files. 11 | | 12 | */ 13 | 14 | mix.js('resources/js/app.js', 'public/js') 15 | .sass('resources/sass/app.scss', 'public/css'); 16 | --------------------------------------------------------------------------------