Laravel Sanctum 登录后未认证

huangapple
go评论104阅读模式
英文:

Laravel Sanctum Unauthenticated after login

问题

我正在尝试为SPA（React）与Sanctum设置身份验证。

每当我成功登录，然后尝试访问auth:sanctum中间件中的路由时，它会返回401未经授权的错误。

以下是我的URL：

SPA：localhost:3000

后端：https://local-erp.XXX.com/

以下是我的配置文件：

sanctum.php：

  1. 'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
  2.     '%s%s',
  3.     'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1,https://local-erp.XXX.com',
  4.     Sanctum::currentApplicationUrlWithPort()
  5. ))),

kernel.php：

  1. protected $middlewareGroups = [
  2.     'web' => [
  3.         \App\Http\Middleware\EncryptCookies::class,
  4.         \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
  5.         \Illuminate\Session\Middleware\StartSession::class,
  6.         \Illuminate\View\Middleware\ShareErrorsFromSession::class,
  7.         \App\Http\Middleware\VerifyCsrfToken::class,
  8.         \Illuminate\Routing\Middleware\SubstituteBindings::class,
  9.     ],
  11.     'api' => [
  12.         \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
  13.         \Illuminate\Routing\Middleware\ThrottleRequests::class . ':api',
  14.         \Illuminate\Routing\Middleware\SubstituteBindings::class,
  15.     ],
  16. ];

.env：

  1. SESSION_DOMAIN:.localhost

我还尝试过*.localhost和localhost。

这是我的LoginController：

  1. <?php
  3. namespace App\Http\Controllers\Auth;
  5. use App\Http\Controllers\Controller;
  6. use App\Providers\RouteServiceProvider;
  7. use App\Service\Ldap;
  8. use Illuminate\Foundation\Auth\AuthenticatesUsers;
  9. use Illuminate\Http\Request;
  11. class LoginController extends Controller
  12. {
  13.     use AuthenticatesUsers;
  15.     protected $redirectTo = RouteServiceProvider::HOME;
  17.     public function __construct()
  18.     {
  19.         $this->middleware('guest')->except('logout');
  20.     }
  22.     public function username()
  23.     {
  24.         return 'username';
  25.     }
  27.     protected function credentials(Request $request)
  28.     {
  29.         return [
  30.             'sAMAccountName' => $request->username,
  31.             'password' => $request->password
  32.         ];
  33.     }
  34. }

这是我的查询：

  1. axios.get("https://local-erp.XXX.com/sanctum/csrf-cookie").then(response => {
  2.     axios.post("https://local-erp.XXX.com/login", {username: "xxx", password: "xxxx"})
  3. })

这两者都返回204 OK状态码。

然后，当我发送这个查询：

  1. const querytest = () => {
  2.     axios.get('https://local-erp.XXX.com/api/users/5/holiday-balance')
  3. }

它返回{"message":"Unauthenticated."}

我知道有很多关于这个问题的帖子，但我尝试了所有我能找到的东西，没有解决我的问题。

值得注意的是，我实际上正在将一个Laravel Blade应用程序移动到一个独立的SPA和后端应用程序中。目前，身份验证是通过LDAP工作的（必须继续工作）。

非常感谢您的帮助！

英文:

I'm trying to setup auth for SPA (react) with sanctum.

Whenever I login successfully, and then, try to get a route that is in auth:sanctum middleware, it return me 401 Unauthenticated.

These are my urls :

SPA : localhost:3000

Backend : https://local-erp.XXX.com/

These are my config files :

sanctum.php :

  1.     &#39;stateful&#39; =&gt; explode(&#39;,&#39;, env(&#39;SANCTUM_STATEFUL_DOMAINS&#39;, sprintf(
  2.         &#39;%s%s&#39;,
  3.         &#39;localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1,https://local-erp.XXX.com&#39;,
  4.         Sanctum::currentApplicationUrlWithPort()
  5.     ))),

kernel.php:

  1.     protected $middlewareGroups = [
  2.         &#39;web&#39; =&gt; [
  3.             \App\Http\Middleware\EncryptCookies::class,
  4.             \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
  5.             \Illuminate\Session\Middleware\StartSession::class,
  6.             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
  7.             \App\Http\Middleware\VerifyCsrfToken::class,
  8.             \Illuminate\Routing\Middleware\SubstituteBindings::class,
  9.         ],
  11.         &#39;api&#39; =&gt; [
  12.             \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
  13.             \Illuminate\Routing\Middleware\ThrottleRequests::class . &#39;:api&#39;,
  14.             \Illuminate\Routing\Middleware\SubstituteBindings::class,
  15.         ],
  16.     ];

.env :

  1. SESSION_DOMAIN:.localhost

I also tried *.localhost, localhost

This is my LoginController :

  1. &lt;?php
  3. namespace App\Http\Controllers\Auth;
  5. use App\Http\Controllers\Controller;
  6. use App\Providers\RouteServiceProvider;
  7. use App\Service\Ldap;
  8. use Illuminate\Foundation\Auth\AuthenticatesUsers;
  9. use Illuminate\Http\Request;
  11. class LoginController extends Controller
  12. {
  13.     /*
  14.     |--------------------------------------------------------------------------
  15.     | Login Controller
  16.     |--------------------------------------------------------------------------
  17.     |
  18.     | This controller handles authenticating users for the application and
  19.     | redirecting them to your home screen. The controller uses a trait
  20.     | to conveniently provide its functionality to your applications.
  21.     |
  22.     */
  24.     use AuthenticatesUsers;
  26.     /**
  27.      * Where to redirect users after login.
  28.      *
  29.      * @var string
  30.      */
  31.     protected $redirectTo = RouteServiceProvider::HOME;
  33.     /**
  34.      * Create a new controller instance.
  35.      *
  36.      * @return void
  37.      */
  38.     public function __construct()
  39.     {
  40.         $this-&gt;middleware(&#39;guest&#39;)-&gt;except(&#39;logout&#39;);
  41.     }
  43.     public function username()
  44.     {
  45.         return &#39;username&#39;;
  46.     }
  48.     protected function credentials(Request $request)
  49.     {
  50.         return [
  51.             &#39;sAMAccountName&#39; =&gt; $request-&gt;username,
  52.             &#39;password&#39; =&gt; $request-&gt;password
  53.         ];
  54.     }
  55. }

This is my queries :

  1. axios.get(&quot;https://local-erp.XXX.com/sanctum/csrf-cookie&quot;).then(response =&gt; {
  2.       axios.post(&quot;https://local-erp.XXX.com/login&quot;,  {username: &quot;xxx&quot;, password: &quot;xxxx&quot;})
  3.     })

which returns both 204 OK Status Code.

Then when I send this :

  1. const querytest = () =&gt; {
  2.     axios.get(&#39;https://local-erp.XXX.com/api/users/5/holiday-balance&#39;)
  3.   }

It returns {&quot;message&quot;:&quot;Unauthenticated.&quot;}

I know there is a lot of post about this, but I tried everything I could find and nothing fixed my problem.

It might be good to know, I'm actually moving a laravel blade app into a separate spa and back application. Currently, auth worked with ldap (which must still work).

Any help would be greatly appreciated!

答案1

得分: 0

经过多次测试，我发现不可能使用不同的域名。

在我的情况下，即使我使用子域名，也不能使用相同的域名，所以我的解决方案是使用API令牌进行身份验证。
它非常有效，并被用作RESTful API。

英文:

After severals test, I found it was not possible to use different domains names.

In my case I couldn't use the same one, even if I used subdomains, so my solution was to auth with API token.
It works like a charm and is used as an RESTFUL API.

huangapple
  • 本文由 发表于 2023年7月17日 16:31:59
  • 转载请务必保留本文链接：https://go.coder-hub.com/76702700.html
  • authentication
  • axios
  • laravel
  • laravel-sanctum
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定