Extend the base solution from Laravel with some new features
- Auto refresh user token on
GETrequests - Refresh/Revoke methods
- Blade directive
You can install the package via composer:
composer require exodusanto/laravel-conciergeMigrate your user table with api_token and api_token_refreshed_at.
Schema::table('users', function (Blueprint $table) {
$table->string('api_token')->nullable();
$table->timestamp('api_token_refreshed_at')->nullable();
});This attribute is use to store the timestamp of api_token update
Add RefreshApiToken trait and RefreshApiTokenContract contract to your model
class User extends BaseUser implements RefreshApiTokenContract
{
use RefreshApiToken;
}Publish concierge config
php artisan vendor:publish --tag=concierge-configUse the same key to identify the right model in auth.providers and concierge.tokens_lifetime
// config/auth.php
'providers' => [
'users' => [
'driver' => 'eloquent',
'model' => App\User::class,
],
]
// config/concierge.php
'tokens_lifetime' => [
'users' => 10800 // 3h
]Append RefreshApiToken to your application web middleware group
// app/Http/Kernel.php
protected $middlewareGroups = [
'web' => [
...
\Exodusanto\Concierge\Http\Middleware\RefreshApiToken::class,
],Concierge is shipped with a custom Blade directive, it will render the token of the authenticated user
@concierge
<!-- Rendered to -->
<script>
__CONCIERGE__ = { "api_token": "XXXXXXXXXXXX" }
</script>@concierge($guard, $attributeName)
@concierge('other_guard', 'my_token')
<!-- Rendered to -->
<script>
<!-- Token of other_guard authenticated user -->
__CONCIERGE__ = { "my_token": "XXXXXXXXXXXX" }
</script>composer testPlease see CHANGELOG for more information what has changed recently.
Please see CONTRIBUTING for details.
If you discover any security related issues, please email [email protected] instead of using the issue tracker.
The MIT License (MIT). Please see License File for more information.
This package was generated using the Laravel Package Boilerplate.