Laravel Sanctum 在不创建新令牌的情况下检索 PlainTextToken

Question

I am creating a SPA with vue and laravel. I know i can issue out tokens for every user and store it as a new entry on the database. And from the documentation, I can only list out all the tokens available to a user in hashed format with laravel and the property $token->plainTextToken is not accessible from the eloquent query. I use both normal authentication and sanctum authentication and i sometimes have the need to give back the token to the user. Must i issue out new tokens on every page refresh or is there a way to go about this?

Answer 1

I don't know if I understand your question correctly. But do you intend to issue out the token to user after authentication?

The token is stored in the DB as you rightly stated. But what is stored is the hashed copy. The moment you have created the token, you can call the plainTextToken property to get the unhashed copy of the token. This is the one your vue app should send for authorization during each request.

$token = $user->createToken('token-name')->plainTextToken;

This token value is what should be issued out to your vue app to store and use subsequently.

Secondly, the value of $token that will be returned (as at Laravel <= 8.**) may likely contain the id of the table and the unhashed copy of the token. For instance

4|92paqtuqnd92920101ijdkksksn

You are to explode that string and only send the value after the pipe sign. The first value there only shows the id of the table row.

Lastly, I don't understand why the need to issue out new tokens after each page refresh. Maybe I didn't understand your question correctly. But you can simply pass the token back to your vue app in your response, or if it's a synchronous request, you can store it in session and pick it up when you need to.

Answer 2

there is way i think like bearer token

        $token = null;
        $headers = apache_request_headers();
        if(isset($headers['Authorization'])){
            if (strpos($headers['Authorization'], 'Bearer') !== false) {
                $token = str_replace('Bearer ', '',$headers['Authorization']);
            }
        }

it will return given token