Laravel Passport - /oauth/token generates invalid token

Question

So I created a client using php artisan passport:client, and when I do a POST request to oauth/token I thankfully get back a token.

However, when I try to use that token by putting it in my headers and going to an auth:api protected route I get 401 unauthorized.

Using a different route to login, however, seems to work. When I use this route in my api controller:

Route::post('/login', 'Auth\LoginController@login')->name('login');

which has the following code:

public function login(Request $request) {
    $input = $request->all();

    if (Auth::attempt(['email' => $input['email'], 'password' => $input['password'] ])) {
        $user = Auth::user();

        return [
            'success' => true,
            'token' => $user->createToken('test')->accessToken
        ];
    }

    return [
        'success' => false,
        'message' => 'unable to authenticate'
    ];
}

I get back a token that works on protected routes.

I'm using Postman to test, I have headers Authorization: Bearer <token> and Accept: application/json. Not sure why it works one way but not another.

edit: Here is the protected route:

Route::middleware('auth:api')->get('/user', function (Request $request) 
{
    return $request->user();
});

which uses:

'api' => [
    'driver' => 'passport',
    'provider' => 'users',
],

Have you checked that the returned token exists in the database? Also, you passed in an empty scopes, that might be affecting things as well. — FatBoyXPC
it does, but i noticed that the user_id column is null for that token. however the client im using to authenticate with has a user_id associated with it — janedoe
You just answered your own question, you need to figure out why user_id isn't getting set. — FatBoyXPC

Noe Reyes Noe Reyes · Accepted Answer · 2020-05-01T18:51:09

0

votes

In my case remove the Lsapi component from WHM server and function.

Laravel Passport - /oauth/token generates invalid token

1 Answers