Level 29
Its exactly what it says, TokenGuard does not method called attempt ... what are you trying to do ???
Mar 22, 2016
9
Level 33
Laravel api Auth::attempt not working
Hello,
When I try to check if a user can sign it like this:
if(Auth::attempt(array('email' => $request->email, 'password' => $request->password)))
It throws an error:
call_user_func_array() expects parameter 1 to be a valid callback, class 'Illuminate\Auth\TokenGuard' does not have a method 'attempt'
When a user is signed in I want to send his/her api_token back.
Why is that? My default guard is token.
Level 33
@premsaurav I'm trying to validate the user. And when he or she signed in successfully I want to send his token back.
Level 29
Token guard doesn't work that way,
- Authenticate the user, using session guard.
- On successful authentication, generate a token and save it against the user,
- On others routes where you need the token, use token guard.
Level 33
@premsaurav oke, so if my default is api and I want to use a session I should just put it in my web middleware route right? Like this:
Route::group(['prefix' => 'api/v1','middleware' => ['web']], function () {
Route::post('/login', 'api\v1\EmployeeController@login');
});
Level 29
If its only about the Api's you dont need the web middleware, which is required if you want to login the user with session and cookies ...
public function login() {
if(Auth::guard('web')->attempt(['email' => $email, 'password' => $password], false, false)) {
// user credentials are correct. Issue a token and use it in next requests
// Notice false, false => no login is performed
} else {
// invalid credentials, act accordingly
}
}
2 likes
Level 33
@premsaurav thanks again!
Level 33
@premsaurav how could I get a value of the authenticated user like that? Something like this?
Auth::guard('web')->FirstName
Level 29
public function login() {
if(Auth::guard('web')->attempt(['email' => $email, 'password' => $password], false, false)) {
$user = Auth::guard('web')->getLastAttempted(); // get hold of the user
// user credentials are correct. Issue a token and use it in next requests
// Notice false, false => no login is performed
} else {
// invalid credentials, act accordingly
}
}
1 like
Level 1
What is the ideal way to authenticate user using password and return token on successful authentication? Should I edit the TokenGuard, to add attempt() method?
Please or to participate in this conversation.