Symfony JSON Web Token Authentication
Lightweight JWT Authentication Bundle. The bundle also provides Refresh and Access tokens.
Installation
php composer.phar require "agven/symfony-jwt-auth"
or add agven/symfony-jwt-auth
to your composer.json file. This bundle using the firebase/php-jwt
library for decode and encode jwt token.
Configure your security.yml :
security:
# ...
firewalls:
auth:
pattern: ^/api/auth
anonymous: true
stateless: true
api:
pattern: ^/api
stateless: true
guard:
authenticators:
- Agven\JWTAuthBundle\Security\TokenAuthenticator
# ...
access_control:
- { path: ^/api/auth, roles: IS_AUTHENTICATED_ANONYMOUSLY, methods: [POST] }
- { path: ^/api, roles: ROLE_ADMIN }You can get the token for user with service like this:
// ...
use Agven\JWTAuthBundle\Core\Services\Manager\Token as TokenManagerInterface;
class AuthManager
{
private $tokenManager;
public function __construct(TokenManagerInterface $tokenManager)
{
$this->tokenManager = $tokenManager;
}
public function auth(UserAuthRequest $userAuth)
{
$user = $this->userRepository->findOneByUsername($userAuth->username);
if (!$user) {
throw new EntityNotFoundException('User not found.');
}
// ...
$token = $this->tokenManager->create($user);
$payload = $this->tokenManager->getTokenPayload();
// ...
}If you want use refresh and access token
// ...
use Agven\JWTAuthBundle\Core\Services\Manager\RefreshToken as TokenManagerInterface;
class AuthManager
{
private $tokenManager;
public function __construct(TokenManagerInterface $tokenManager)
{
$this->tokenManager = $tokenManager;
}
public function auth(UserAuthRequest $userAuth)
{
$user = $this->userRepository->findOneByUsername($userAuth->username);
if (!$user) {
throw new EntityNotFoundException('User not found.');
}
// ...
$accessToken = $this->tokenManager->createAccess($user);
$refreshToken = $this->tokenManager->createRefresh();
$payload = $this->tokenManager->getTokenPayload();
// ...
}
public function refreshToken(string $refreshToken)
{
$user = $this->userRepository->findOneByToken($refreshToken);
if (!$user) {
throw new NotFoundException('User not found.');
}
// ...
$accessToken = $this->tokenManager->createAccess($user);
$refreshToken = $this->tokenManager->createRefresh();
$payload = $this->tokenManager->getTokenPayload();
// ...
}
To Do
- Add tests.
- Improve documentation.
