Laravel 圣所令牌 - 两个数据库

Question

我在获取 Laravel Sanctum 授权两个单独数据库中的两个表时遇到了一些问题。

我正在使用 Laravel Sanctum 令牌进行授权。 我有两个表来授权用户（用户和联系人）我已经设置了两个单独的警卫，并且可以使用一个令牌表在单个数据库上运行所有内容。

但是我想将联系人表放在单独的数据库中。 这样做会创建两个personal_access_tokens 表，一个在Users 数据库中，另一个在Contacts 数据库中，我不介意。 我可以很好地创建令牌，但是当我尝试使用令牌授权联系人时，Sanctum 正在尝试查看用户个人访问令牌表，而不是联系人个人访问令牌表。 所以本质上它只是查看personal_access_tokens表的错误数据库，我不知道如何改变它。

我的设置如下：

警卫：

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],

    /*'api' => [
        'driver' => 'token',
        'provider' => 'users',
        'hash' => false,
    ],*/

    'users' => [
        'driver' => 'sanctum',
        'provider' => 'users',
        'hash' => false,
    ],

    'contacts' => [
        'driver' => 'sanctum',
        'provider' => 'contacts',
        'hash' => false,
    ],
],

提供者

   'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\Models\User::class,
        ],

        'contacts' => [
            'driver' => 'eloquent',
            'model' => App\Models\Contact::class,
        ],
    ],

用户 Model

namespace App\Models;

use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;

    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'name',
        'email',
        'password',
    ];

    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password',
        'remember_token',
    ];

    /**
     * The attributes that should be cast to native types.
     *
     * @var array
     */
    protected $casts = [
        'email_verified_at' => 'datetime',
    ];
}

联系 Model

namespace App\Models;

use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Laravel\Sanctum\HasApiTokens;

class Contact extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;

    /**
     * The connection name for the model.
     *
     * @var string
     */
    protected $connection = 'puranet_crm';

    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'first_name',
        'last_name',
        'email',
        'password',
    ];

    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password',
        'remember_token',
    ];

    /**
     * The attributes that should be cast to native types.
     *
     * @var array
     */
    protected $casts = [
        'email_verified_at' => 'datetime',
    ];
}

我的两条 api 自动化路线是：

Route::group(['middleware' => 'auth:sanctum'], function() {
    //All secure URL's
    Route::get('test',[UserController::class, 'test']);
});

Route::group(['middleware' => 'auth:contacts'], function() {
    Route::get('test-contacts',[ContactController::class, 'test']);
});

联系 Controller （这与 UserController 相同，但它所引用的 Model 除外）

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use App\Models\Contact;
use Illuminate\Support\Facades\Hash;

class ContactController extends Controller
{
    /**
     * @param Request $request
     * @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\Response
     */
    public function login(Request $request)
    {

        $user = Contact::where('email', $request->email)->first();

        if (!$user || !Hash::check($request->password, $user->password)) {
            return response([
                'message' => ['These credentials do not match our records.']
            ], 404);
        }

        $token = $user->createToken('contacts-app-token')->plainTextToken;

        $response = [
            'user' => $user,
            'token' => $token
        ];

        return response($response, 201);
    }

    /**
     * @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\Response
     */
    public function test()
    {
        return response(["response" => "Test Contacts"], 201);
    }
}

Answer 1

您需要覆盖项目中的 sanctum model 并覆盖其中的 $connection 变量，这样您就可以连接到您想要的数据库，与普通模型一样。您可以找到如何覆盖版本 8 的 Laravel 文档中的 sanctum model。在您的一个项目中创建此 model 以覆盖 sanctum 将查找令牌的位置。

class PersonalAccessToken extends SanctumPersonalAccessToken{

  use HasFactory;

  protected $connection = 'name of your connection in database.php';
}

所以两个圣所都将使用相同的数据库来验证用户。

我希望我对你有帮助：）