NuxtJS/Laravel 8 + 圣所

Question

如何通过 Session/Cookie 在生产中进行身份验证

Nuxt (NuxtAuth - Laravel Sanctum Provider, SPA) Laravel (8.0 + Sanctum)

它适用于：

Nuxt - 本地主机：3000

Laravel - 本地主机：8000

我的生产配置

Laravel： api.domain.com

NuxtJS（SPA）：域.com

.env

SANCTUM_STATEFUL_DOMAINS=domain.com, api.domian.com
SESSION_DOMAIN=api.domain.com
SESSION_DRIVER=cookie
APP_URL=https://api.domian.com

配置/cors.php

'paths' => ['api/*', 'sanctum/csrf-cookie', 'login'],

配置/sanctum.php

'guard' => ['api'], //default ‘web’

配置/会话.php

'same_site' => "None", //default Lax

config/auth.php

'guards' => [
        'web'     => [
            'driver'   => 'session',
            'provider' => 'users',
        ],
        'api'     => [
            'driver'   => 'session',
            'provider' => 'users',
        ],
        'sanctum' => [
            'driver'   => 'sanctum',
            'provider' => 'users',
        ],
    ],

app/Http/Kernel.php

  protected $middlewareGroups = [
       'api' => ['stateful', 'throttle', 'bindings'],
       'spa' => ['stateful', 'throttle', 'bindings'],
    ];

路线/api.php

Route::post('login', [AuthController::class, 'login']);

Route::group(['middleware' => 'auth:sanctum'], function()
{
    Route::get('/api/user', [AuthController::class, 'user']);
}

app/Providers/RouteServiceProvider.php

public function boot()
    {
        $this->configureRateLimiting();

        $this->routes(function () {
            Route::middleware('api')
                ->namespace($this->namespace)
                ->group(base_path('routes/api.php'));

            Route::middleware('web')
                ->namespace($this->namespace)
                ->group(base_path('routes/web.php'));
        });
    }

最后

GET /sanctum/csrf-cookie 响应 204 POST /login 响应 200 使用 X-CSRF-TOKEN，设置 Cookie Header

但..

在 GET /api/user 上未经身份验证

请帮忙