Mixing
Laravel Passport always returns 401 Unauthenticated
I'm driving crazy! I've been searching around the web on thousands of StackOverFlow questions and haven't solved my issue.
I'm developing an API REST with Laravel Framework 5.7 and Passport 7.0. I've setup every file following the documentation and I'm able to get a token with grant_type=password (without authentication flow), but when I try to access to a route protected by the auth:api middleware, I always get a 401 response.
This is my HTTP request:
GET /api/usuario/1/grupos HTTP/1.1
Host: localhost:8000
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI...
Here's my auth.php guard config:
'guards' => [
'api' => [
'driver' => 'passport',
'provider' => 'users',
],
],
This is the mapApiRoutes() in my RouteServiceProvider.php:
protected function mapApiRoutes()
{
Route::prefix('api')
->middleware('auth:api')
->namespace($this->namespace)
->group(base_path('routes/api.php'));
}
Thanks.
This is my login request using Postman
This is the 401 when I try to use the token in an api route
EDIT:
If I disable 'auth:api' middleware, I can actually get the Bearer token using $request->bearerToken(), so the problem is not now with the CSRF token, because I can receive the request.
php laravel rest oauth-2.0 laravel-passport
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
add a comment |
I'm driving crazy! I've been searching around the web on thousands of StackOverFlow questions and haven't solved my issue.
I'm developing an API REST with Laravel Framework 5.7 and Passport 7.0. I've setup every file following the documentation and I'm able to get a token with grant_type=password (without authentication flow), but when I try to access to a route protected by the auth:api middleware, I always get a 401 response.
This is my HTTP request:
GET /api/usuario/1/grupos HTTP/1.1
Host: localhost:8000
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI...
Here's my auth.php guard config:
'guards' => [
'api' => [
'driver' => 'passport',
'provider' => 'users',
],
],
This is the mapApiRoutes() in my RouteServiceProvider.php:
protected function mapApiRoutes()
{
Route::prefix('api')
->middleware('auth:api')
->namespace($this->namespace)
->group(base_path('routes/api.php'));
}
Thanks.
This is my login request using Postman
This is the 401 when I try to use the token in an api route
EDIT:
If I disable 'auth:api' middleware, I can actually get the Bearer token using $request->bearerToken(), so the problem is not now with the CSRF token, because I can receive the request.
php laravel rest oauth-2.0 laravel-passport
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29
add a comment |
I'm driving crazy! I've been searching around the web on thousands of StackOverFlow questions and haven't solved my issue.
I'm developing an API REST with Laravel Framework 5.7 and Passport 7.0. I've setup every file following the documentation and I'm able to get a token with grant_type=password (without authentication flow), but when I try to access to a route protected by the auth:api middleware, I always get a 401 response.
This is my HTTP request:
GET /api/usuario/1/grupos HTTP/1.1
Host: localhost:8000
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI...
Here's my auth.php guard config:
'guards' => [
'api' => [
'driver' => 'passport',
'provider' => 'users',
],
],
This is the mapApiRoutes() in my RouteServiceProvider.php:
protected function mapApiRoutes()
{
Route::prefix('api')
->middleware('auth:api')
->namespace($this->namespace)
->group(base_path('routes/api.php'));
}
Thanks.
This is my login request using Postman
This is the 401 when I try to use the token in an api route
EDIT:
If I disable 'auth:api' middleware, I can actually get the Bearer token using $request->bearerToken(), so the problem is not now with the CSRF token, because I can receive the request.
php laravel rest oauth-2.0 laravel-passport
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
I'm driving crazy! I've been searching around the web on thousands of StackOverFlow questions and haven't solved my issue.
I'm developing an API REST with Laravel Framework 5.7 and Passport 7.0. I've setup every file following the documentation and I'm able to get a token with grant_type=password (without authentication flow), but when I try to access to a route protected by the auth:api middleware, I always get a 401 response.
This is my HTTP request:
GET /api/usuario/1/grupos HTTP/1.1
Host: localhost:8000
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI...
Here's my auth.php guard config:
'guards' => [
'api' => [
'driver' => 'passport',
'provider' => 'users',
],
],
This is the mapApiRoutes() in my RouteServiceProvider.php:
protected function mapApiRoutes()
{
Route::prefix('api')
->middleware('auth:api')
->namespace($this->namespace)
->group(base_path('routes/api.php'));
}
Thanks.
This is my login request using Postman
This is the 401 when I try to use the token in an api route
EDIT:
If I disable 'auth:api' middleware, I can actually get the Bearer token using $request->bearerToken(), so the problem is not now with the CSRF token, because I can receive the request.
php laravel rest oauth-2.0 laravel-passport
php laravel rest oauth-2.0 laravel-passport
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
edited Dec 12 '18 at 8:05
Iván Ávalos
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
asked Dec 12 '18 at 4:35
Iván ÁvalosIván Ávalos
1039
1039
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29
add a comment |
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53736145%2flaravel-passport-always-returns-401-unauthenticated%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53736145%2flaravel-passport-always-returns-401-unauthenticated%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Hi Iván, have you seen this stackoverflow.com/a/42032593/5458355
– Walter Cejas
Dec 12 '18 at 6:11
How can I get the CSRF token from Postman?
– Iván Ávalos
Dec 12 '18 at 6:29