下午好，我尝试在我的项目中使用 LexikJWTAuthenticationBundle，但我遇到了未生成令牌的问题。我已在 var/jwt 目录中设置私钥和公钥。当我尝试使用登录路由时，API 返回此响应：{ "code": 401, "message": "JWT Token not found"}阿帕奇虚拟主机：<VirtualHost *:80> ServerName ypostirixi DocumentRoot "/var/www/ypostirixi/public" RewriteEngine On RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]</VirtualHost>公共目录中的.htaccess文件：<IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule .* - [e=HTTP_AUTHORIZATION:%1] # Send would-be 404 requests to Craft RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule (.+) index.php?p=$1 [QSA,L]</IfModule>security.yaml 安全性：encoders: App\Entity\User: algorithm: bcryptproviders: doctrine_provider: entity: class: App\Entity\User property: emailfirewalls: dev: pattern: ^/(_(profiler|wdt)|css|images|js)/ security: false api_doc: pattern: ^/api/doc security: false api: pattern: ^/api stateless: true guard: authenticators: - lexik_jwt_authentication.jwt_token_authenticator main: pattern: ^/ stateless: true guard: authenticators: - lexik_jwt_authentication.jwt_token_authenticator provider: doctrine_provideraccess_control: - { path: ^/api/login, roles: IS_AUTHENTICATED_ANONYMOUSLY } - { path: ^/api, roles: IS_AUTHENTICATED_FULLY }我希望成功使用登录路由并在其他路由上生成有效令牌。
3 回答
慕森王
TA贡献1777条经验 获得超3个赞
也许您忘记在防火墙部分或登录参数（电子邮件作为用户名）中配置登录防火墙..
检查这个
1配置/包/security.yaml
firewalls:
login:
pattern: ^/api/login
stateless: true
anonymous: true
form_login:
check_path: /api/login_check
username_parameter: email
password_parameter: password
success_handler: lexik_jwt_authentication.handler.authentication_success
failure_handler: lexik_jwt_authentication.handler.authentication_failure
require_previous_session: false
api:
pattern: ^/api
stateless: true
guard:
authenticators:
- lexik_jwt_authentication.jwt_token_authenticator
access_control:
- { path: ^/api/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/api/, role: IS_AUTHENTICATED_FULLY }
2配置/routes.yaml
api_login_check:
path: /api/login_check
3用curl测试一下
X POST -H "Content-Type: application/json" http://localhost/api/login_check -d '{"email":"user@example.com","password":"pass"}'
函数式编程
TA贡献1807条经验 获得超9个赞
您不允许匿名访问任何防火墙。您应该将匿名选项添加到您的主防火墙中。
main:
pattern: ^/
stateless: true
anonymous: true
guard:
authenticators:
- lexik_jwt_authentication.jwt_token_authenticator
provider: doctrine_provider
阿晨1998
TA贡献2037条经验 获得超6个赞
我发现此升级存在问题，但我有解决方案。
在 lexik_jwt_authentication.yaml 文件中：
lexik_jwt_authentication:
secret_key: '%env(resolve:JWT_SECRET_KEY)%'
public_key: '%env(resolve:JWT_PUBLIC_KEY)%'
pass_phrase: '%env(JWT_PASSPHRASE)%'
token_ttl: '%env(JWT_TTL)%'
token_extractors:
authorization_header:
enabled: true
prefix: '%env(JWT_TOKEN_PREFIX)%'
name: Authorization
user_identity_field: email
- 3 回答
- 0 关注
- 72 浏览
添加回答
举报
0/150
提交
取消