Jwt in laravel 6

After installing a fresh laravel 6 we need to follow these steps to secure Rest
Api Using Jwt Token.

Step: 1 Create auth routes
-------------------------------------------------------------
composer require laravel/ui "^1.0" --dev

php artisan ui vue --auth

php artisan migrate

Step: 2 Install jwt package
---------------------------
composer require tymon/jwt-auth

php artisan vendor:publish --provider="Tymon\JWTAuth\Providers\LaravelServiceProvider"

php artisan jwt:secret

Add service provider in app/app.php inside 'providers'

Tymon\JWTAuth\Providers\LaravelServiceProvider::class,


Step 3#: Update your user model
---------------------------
<?php

namespace App;

use Tymon\JWTAuth\Contracts\JWTSubject;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;

class User extends Authenticatable implements JWTSubject
{
    use Notifiable;

    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'name', 'email', 'password',
    ];

    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password', 'remember_token',
    ];

    /**
     * The attributes that should be cast to native types.
     *
     * @var array
     */
    protected $casts = [
        'email_verified_at' => 'datetime',
    ];

     public function getJWTIdentifier()
    {
        return $this->getKey();
    }

 
    public function getJWTCustomClaims()
    {
        return [];
    }
}


Step: 4# Create middleware
---------------------------
php artisan make:middleware AuthJwt

Middleware code
  $routeMiddleware in array

 'jwtauth'  => \App\Http\Middleware\AuthJwt::class,

change guard in auth.php

driver' => 'jwt',

Middleware code

<?php

namespace App\Http\Middleware;
use Illuminate\Support\Facades\Auth;

use Closure;

class AuthJwt
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        try {
            $user = $this->guard()->userOrFail();
        } catch (\Tymon\JWTAuth\Exceptions\UserNotDefinedException $e) {
            echo $e->getMessage();
        }

        return $next($request);
     
    }

    public function guard()
    {
    return Auth::guard('api');
    }
}



Step:5# Create Auth controller
---------------------------
php artisan make:controller AuthController

<?php
namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Http\Controllers\Controller;


class AuthController extends Controller
{

public function login(Request $request)
{
$credentials = request(['email', 'password']);
            if (! $token = auth('api')->attempt($credentials)) {
            return response()->json(['error' => 'Invalid Credentials'], 401);
        }

            return $this->respondWithToken($token);
}

/**
* Get the authenticated User
*
* @return \Illuminate\Http\JsonResponse
*/
public function me()
{
return response()->json($this->guard()->user());
}

/**
* Log the user out (Invalidate the token)
*
* @return \Illuminate\Http\JsonResponse
*/
public function logout()
{
$this->guard()->logout();

return response()->json(['message' => 'Successfully logged out']);
}

/**
* Refresh a token.
*
* @return \Illuminate\Http\JsonResponse
*/
public function refresh()
{
return $this->respondWithToken($this->guard('api')->refresh());
}

/**
* Get the token array structure.
*
* @param string $token
*
* @return \Illuminate\Http\JsonResponse
*/
protected function respondWithToken($token)
{
return response()->json([
'access_token' => $token,
'token_type' => 'bearer',
'expires_in' => $this->guard('api')->factory()->getTTL() * 60
]);
}

/**
* Get the guard to be used during authentication.
*
* @return \Illuminate\Contracts\Auth\Guard
*/
public function guard()
{
return Auth::guard('api');
}
}

?>

Step 6#: Adding auth routes
--------------------------------

Route::post('login', 'AuthController@login');

Route::get('me', 'AuthController@me')->middleware('jwtauth');

Route::get('logout', 'AuthController@logout');


Route::get('refresh', 'AuthController@refresh');


Postman testing