thinkphp5框架API token身份驗證功能【示例】

下面由thinkphp教程欄目給大家介紹【示例】thinkphp5框架API token身份驗證功能，希望對需要的朋友有所幫助！

使用說明：登陸時生成token和刷新用的refresh_token,返回給客戶端，客戶端收到保存本地localStorage等，每次訪問接口帶上token，后端驗證token存在并且一致后方可執行接下來的動作，假如不存在就返回token過期，客戶端調用刷新接口傳入token和refresh_token,服務器端進行驗證，驗證通過重新生成新的token保存數據庫，返回給客戶端客戶端刷新本地token訪問即可繼續，當refresh_token驗證失敗就清除數據庫token，過期時間等信息

簡單的token生成函數（公共函數文件common）

function create_token($id,$out_time){   return substr(md5($id.$out_time),5,26); }

驗證登陸方法（模型）

public function checkLogin($username,$passwd){     $driver = self::field('driver_id,passwd')->where('zhanghao',$username)->whereOr('phone',$username)->find();     if (empty($driver)){       $this->error = '賬號不存在';       return false;     }     if ($driver['passwd'] != md5($passwd)){       $this->error = "密碼不正確";       return false;     }     //$out_time = strtotime('+ 1 days');     $out_time = strtotime('+ 1 minutes');     $token = create_token($driver['driver_id'],$out_time);     if(false===self::save(['token'=>$token,'time_out'=>$out_time],['driver_id'=>$driver['driver_id']])){       $this->error = '登陸失敗';       return false;     }     $refresh_token_out_time = strtotime('+ 5 days');     $refresh_token = create_token($driver['driver_id'],$refresh_token_out_time);     Cache::set("token",$token,60);     Cache::set("driver_id",$driver['driver_id'],$refresh_token_out_time);//設置ID的過期時間和更新token的token時間一樣用于更新的時候獲取用戶信息     Cache::set('refresh_token',$refresh_token,$refresh_token_out_time);     return ['token'=>$token,'refresh_token'=>$refresh_token,'in_expire'=>$out_time]; }

token刷新方法（模型）

public function refreshToken($refresh_token,$token){     if (!isset(Cache::get('refresh_token')) or Cache::get('refresh_token')!=$refresh_token){       $this->error = '刷新token失敗';       return false;     }     $cache_driver_id = Cache::get('driver_id');     $driver = self::field('driver_id,passwd')->where('driver_id',$cache_driver_id)->where('token',$token)->find();     if (empty($driver)){       $this->error = '參數錯誤';       return false;     }     $out_time = strtotime('+ 1 days');//新的過期時間     $token = create_token($driver['driver_id'],$out_time);//更新token     if(false===self::save(['token'=>$token,'time_out'=>$out_time],['driver_id'=>$driver['driver_id']])){       Cache::clear($token);       $this->error = '刷新失敗';       return false;     }     Cache::set("token",$token,864000);     return ['token'=>$token,'in_expire'=>$out_time]; }

退出方法（模型）

public function logout($token,$refresh_token=''){     $driver = self::field('driver_id,passwd')->where('token',$token)->find();     self::save(['token'=>'','time_out'=>''],['token'=>$token]);     Cache::clear('token');     Cache::clear('refresh_token'); }