laravel如何与前端框架进行Token认证_Laravel前端Token认证实现方法

'api' => [
    \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
    'throttle:api',
    \Illuminate\Routing\Middleware\SubstituteBindings::class,
],

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

public function login(Request $request)
{
    $credentials = $request->only('email', 'password');

    if (!Auth::attempt($credentials)) {
        return response()->json(['message' => 'Invalid credentials'], 401);
    }

    $user = Auth::user();
    $token = $user->createToken('frontend-token')->plainTextToken;

    return response()->json([
        'access_token' => $token,
        'token_type' => 'Bearer',
        'user' => $user
    ]);
}

Authorization: Bearer <your-access-token>

axios.defaults.headers.common['Authorization'] = 'Bearer ' + token;

axios.get('/api/user', {
    headers: {
        'Authorization': 'Bearer ' + token
    }
});

use Illuminate\Http\Request;

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/user', function (Request $request) {
        return $request->user();
    });

    Route::post('/logout', function (Request $request) {
        $request->user()->currentAccessToken()->delete();
        return ['message' => 'Logged out'];
    });
});

// 删除当前Token
$request->user()->currentAccessToken()->delete();

// 或删除所有Token
$request->user()->tokens()->delete();