laravel护照撤销和修剪事件监听器没有做任何事情

Moh*_*ini 2 php oauth-2.0 laravel laravel-5.3 laravel-passport

我已将这两个事件监听器添加到我的: EventServiceProvider

/**
 * The event listener mappings for the application.
 *
 * @var array
 */
protected $listen = [
    'Laravel\Passport\Events\AccessTokenCreated' => [
        'App\Listeners\RevokeOldTokens',
    ],

    'Laravel\Passport\Events\RefreshTokenCreated' => [
        'App\Listeners\PruneOldTokens',
    ],
];
Run Code Online (Sandbox Code Playgroud)

在我的AuthServiceProvider中,我有:

 public function boot()
    {
        $this->registerPolicies();

        Passport::routes();
        passport::$revokeOtherTokens;
        passport::$pruneRevokedTokens;
        Passport::tokensExpireIn(Carbon::now()->addDays(1));
        Passport::refreshTokensExpireIn(Carbon::now()->addDays(2));

    }
Run Code Online (Sandbox Code Playgroud)

我希望护照撤销所有其他用户访问令牌,然后如果它们被撤销则修剪它们.但是没有任何事情发生,每当我从邮递员请求访问令牌时,我都会获得一个新的访问令牌,而数据库中有多个访问令牌.

Moh*_*ini 22

我已经解决了我的问题这样:第1步 - 在EventServiceProvider应该更改创建的访问令牌的路径,并刷新创建的令牌:

 protected $listen = [
        'Laravel\Passport\Events\AccessTokenCreated' => [
            'App\Listeners\RevokeOldTokens',
        ],

        'Laravel\Passport\Events\RefreshTokenCreated' => [
            'App\Listeners\PruneOldTokens',
        ],
    ];
Run Code Online (Sandbox Code Playgroud)

Step2-生成这两个侦听器事件:

php artisan event:generate
Run Code Online (Sandbox Code Playgroud)

Step3-修改AccessTokenCreatedRefreshTokenCreated事件处理方法:

RevokeOldTokens类:

namespace App\Listeners;

use Laravel\Passport\Events\AccessTokenCreated;
use Illuminate\Queue\InteractsWithQueue;
use Illuminate\Contracts\Queue\ShouldQueue;
use DB;

class RevokeOldTokens
{
    /**
     * Create the event listener.
     *
     * @return void
     */
    public function __construct()
    {
        //
    }

    /**
     * Handle the event.
     *
     * @param  AccessTokenCreated  $event
     * @return void
     */
    public function handle(AccessTokenCreated $event)
    {


        DB::table('oauth_access_tokens')
            ->where('id', '<>', $event->tokenId)
            ->where('user_id', $event->userId)
            ->where('client_id', $event->clientId)
            ->update(['revoked' => true]);


    }
}
Run Code Online (Sandbox Code Playgroud)

PruneOldTokens类:

namespace App\Listeners;

use Laravel\Passport\Events\RefreshTokenCreated;
use Illuminate\Queue\InteractsWithQueue;
use Illuminate\Contracts\Queue\ShouldQueue;
use DB;

class PruneOldTokens
{
    /**
     * Create the event listener.
     *
     * @return void
     */
    public function __construct()
    {
        //
    }

    /**
     * Handle the event.
     *
     * @param  RefreshTokenCreated  $event
     * @return void
     */
    public function handle(RefreshTokenCreated $event)
    {

        DB::table('oauth_refresh_tokens')
            ->where('id', '<>', $event->refreshTokenId)
            ->where('access_token_id', '<>', $event->accessTokenId)
            ->update(['revoked' => true]);

    }
}
Run Code Online (Sandbox Code Playgroud)

在此步骤之后,如果我向项目发送任何请求,它将检查令牌,如果有另一个令牌,它将撤销它并使其不受欢迎.