This is an example of implementation of JWT authentication on the server side, using Slim3. This code can be used in pair with the ionic2 jwt sample a sample code on JWT via an Ionic2 app.
- Clone or download the repository
- You have to create a database named tokens which should contain a single table named tokens with the following structure:
CREATE TABLE `tokens` (
`id` int(11) unsigned NOT NULL AUTO_INCREMENT,
`value` text,
`user_id` int(11) DEFAULT NULL,
`date_created` int(11) DEFAULT NULL,
`date_expiration` int(11) DEFAULT NULL,
PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
- Be sure that your database configuration match the specification under /src/settings.php
- Check that all is ok by entering into the downloaded repository and launching phpunit using the following command
$ ./vendor/bin/phpunit
- You should see
OK (4 tests, 8 assertions)
- You can now launch the server by typing
php -S 0.0.0.0:8080 -t public public/index.php
- You are ready to send requests to the server. Check /tests/Functional/RoutesTest.php to see what you can do.
Two routes were created:
- An authentication route which allows us to get the credentials and the token sent from the client for validation.
$app->post('/authenticate', function (Request $request, Response $response) {
// ...
})- A route which handle a get request for requiring restricted resource to test out our JWT implementation. This route expected that a token is set on the authorisation header of the request. The token will be validated and if it succeed, we return the requested resource to the client.
$app->get('/restricted', function (Request $request, Response $response) {
// ...
})We used [firebase/php-jwt] (https://github.com/firebase/php-jwt) for creating and decoding the JSON web token.
For simplicity sake, users credentials are stored in a JSON file named users.json located at the root of the project. A database containing a single table named tokens allows us to store each token related information. Database connexion is configured inside /src/dependencies.php.
We created a middleware under the /src/middleware.php file in order to enable CORS.
MIT