如何在没有用户名和密码的情况下生成access_token

Question

我正在尝试用 Passport 制作 API。如果用户尝试登录或注册 Socialite，找到用户然后生成 access_token，然后使用 URL 参数中的 access_token 重定向到前端。

我尝试注册和登录而不是使用用户电子邮件和默认密码生成 access_token，这不适合安全。

try {
    $serviceUser = Socialite::driver($service)->stateless()->user();
} catch (\Exception $e) {
    return redirect(config('app.client_url').'/auth/social-callback?error=Unable to login using '.$service.'. Please try again'.'&origin=login');
}

$email = $serviceUser->getEmail();
$name = $serviceUser->getName();
$user = $this->getExistingUser($serviceUser, $email, $service);
$newUser = false;
if (!$user) {
    $newUser = true;
    $user = new User;
    $user->name = $name;
    $user->email = $email;
    $user->username = Str::random(10);
    if ($service === 'facebook') {
        $user->image = $serviceUser->avatar;
    }
    $user->verify = true;
    $user->save();
}
if ($this->needsToCreateSocial($user, $service)) {
    Social::create([
        'user_id' => $user->id,
        'social_id' => $serviceUser->getId(),
        'service' => $service
    ]);
}

$http = new Client;

$response = $http->post(config('app.url').'/oauth/token', [
    'form_params' => [
        'grant_type' => 'password',
        'client_id' => '2',
        'client_secret' => 'oBKWxgF2fDvrxwA05ciapwy4JYKaHxzhGzr6D24X',
        'username' => $email,
        'password' => 'gebdandi',
        'scope' => '',
    ],
]);

$body = json_decode((string) $response->getBody(), true);

$accessToken = $body['access_token'];

return redirect(config('app.client_url').'/social-callback?token='.$accessToken.'&origin='.($newUser ? 'register' : 'login'));

我在文档中找不到任何解决方案。

Answer 1

阅读所有文档后，我在 documentation

中找到了解决方案

我喜欢这个

像这样编辑 authserviceprovider

public function boot()
    {
        $this->registerPolicies();

        Passport::routes();
        Passport::personalAccessClientId(1);
        Passport::tokensExpireIn(now()->addDays(15));
        Passport::refreshTokensExpireIn(now()->addDays(30));
    }

像这样在控制器中添加代码

$accessToken = $user->createToken('access_token')->accessToken;

感谢 laravel 团队提供良好的文档

如何在没有用户名和密码的情况下生成access_token

How to generate access_token without username and password

laravel-5

laravel-passport

laravel-5.8