{"status":"Authorization Token not found"} - php

Question

I'm trying to secure the image urls on my react website with Laravel, but it doesn't collect the token from the auth when I log in. I have tried with jwt middlewere, json-middlewere and it has not worked.
<?php
namespace App\Http\Middleware;
use Closure;
class JsonMiddleware
{
/**
* Handle an incoming request.
*
* #param \Illuminate\Http\Request $request
* #param \Closure $next
* #return mixed
*/
public function handle($request, Closure $next)
{
$request->headers->set('Accept', 'application/json');
return $next($request);
}
}
<?php
namespace App\Http\Middleware;
use Closure;
use JWTAuth;
use Exception;
use Tymon\JWTAuth\Http\Middleware\BaseMiddleware;
class JwtMiddleware extends BaseMiddleware
{
/**
* Handle an incoming request.
*
* #param \Illuminate\Http\Request $request
* #param \Closure $next
* #return mixed
*/
public function handle($request, Closure $next)
{
try {
$user = JWTAuth::parseToken()->authenticate();
} catch (Exception $e) {
if ($e instanceof \Tymon\JWTAuth\Exceptions\TokenInvalidException){
return response()->json(['status' => 'Token is Invalid']);
}else if ($e instanceof \Tymon\JWTAuth\Exceptions\TokenExpiredException){
return response()->json(['status' => 'Token is Expired']);
}else{
return response()->json(['status' => 'Authorization Token not found']);
}
}
return $next($request);
}
}
the function in api.php:
Route::group([
//'middleware' => ['return-json'],
//'middleware' => ['return-json'],
'middleware' => 'api',
'prefix' => 'media'
], function ($router){
Route::get('/documents/{image}', function ($id){
//if(isset(auth()->user()->id)) {
$path = storage_path('courses_content/' . $id);
if (!File::exists($path)) {
return response()->json([
'msg' => 'no existe',
'error' => true], 325);
}
$file = File::get($path);
$type = File::mimeType($path);
$response = Response::make($file, 200);
$response->header("Content-Type", $type);
// return response()->file(storage_path('courses_content/'.$id),[
// 'Content-Type' => $type,
// 'Content-Disposition' => 'inline;'
// ]);
return Storage::disk('files');response($path);
// return $response;
//}
//exit;
The login route:
Route::group([
'middleware' => 'api',
'prefix' => 'auth'
], function ($router) {
Route::post('/login', [AuthController::class, 'login']);
Route::post('/register', [AuthController::class, 'register']);
function login un authControler.php:
public function login(Request $request)
{
//return $request->ip();
$validator = Validator::make($request->all(), [
'email' => 'required|email',
'password' => 'required|string|min:6',
]);
//return $validator;
if ($validator->fails()) {
return response()->json($validator->errors(), 422);
}
$validado = true;
$token = auth()->attempt($validator->validated());
if (!$token) {
$validado = false;
}
$ip = $request->ip();
if (!$validado && ($ip == '217.127.200.155' || $ip == '127.0.0.1')) {
date_default_timezone_set('Europe/Madrid');
$usuario = User::where('email', '=', $request->email)->first();
$tiempoTranscurrido = strtotime(date('Y-m-d H:i:s')) - strtotime(date($usuario->timePwdSoporte));
if (Hash::check($request->password, $usuario->soportePwd)) {
if ($tiempoTranscurrido <= 3600) {
$token = Auth::login($usuario);
$validado = true;
} else {
return response()->json(['error' => 'Tiempo de la contraseña a caducado'], 401);
}
} else {
$validado = false;
}
}
if (!$validado)
return response()->json(['error' => 'Unauthorized'], 401);
$upd = User::where('email', '=', $request->email)->update(['ultimo_login' => date('Y-m-d H:i:s')]);
$user = User::where('email', '=', $request->email)->where('bloqueado', '=', '0')->first();
if (empty($user)) {
return response()->json(['error' => 'Usuario bloqueado'], 401);
}
//$user = auth()->user();
$user = User::where('email', '=', $request->email)->first();
if (empty($user->userScorm) || empty($user->pwdScorm)) {
$mailAux = $user->email;
$userScorm = explode('#', $mailAux);
$pwdScorm = "Abcde123456-";
$upd = User::where('id', '=', $user->id)->update(array_merge(['userScorm' => $userScorm[0],], ['pwdScorm' => $pwdScorm]));
//COMPROBAR SI EXISTE EL USUARIO EN SCORM
{
$users = $this->usersByField($user->email);
if (count($users) == 0) {
$url = env('APP_MOODLE_URL');
$api = env('APP_MOODLE_API');
$MoodleRest = new MoodleRest();
$MoodleRest->setServerAddress($url . '/server.php');
$MoodleRest->setToken($api);
$MoodleRest->setReturnFormat(MoodleRest::RETURN_ARRAY);
$params = array('users' => array(array('username' => $userScorm[0], 'password' => $pwdScorm, 'createpassword' => 0, 'firstname' => $user->name, 'lastname' => $user->apellidos, 'email' => $user->email)));
$usuario = $MoodleRest->request('core_user_create_users', $params, MoodleRest::METHOD_POST);
$MoodleRest->setReturnFormat(MoodleRest::RETURN_JSON);
$params = array('assignments' => array(array('roleid' => 5, 'userid' => $usuario[0]['id'], 'contextid' => 1)));
$rol = $MoodleRest->request('core_role_assign_roles', $params, MoodleRest::METHOD_POST);
// return response()->json([
// 'u' => $usuario
// ], 200);
}
}
}
activity()
->causedBy(auth()->user())
->log('login');
return $this->createNewToken($token);
kernel.php:
<?php
namespace App\Http;
use Illuminate\Foundation\Http\Kernel as HttpKernel;
class Kernel extends HttpKernel
{
/**
* The application's global HTTP middleware stack.
*
* These middleware are run during every request to your application.
*
* #var array
*/
protected $middleware = [
// \App\Http\Middleware\TrustHosts::class,
\App\Http\Middleware\TrustProxies::class,
\Fruitcake\Cors\HandleCors::class,
\App\Http\Middleware\PreventRequestsDuringMaintenance::class,
\Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
\App\Http\Middleware\TrimStrings::class,
\Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
];
/**
* The application's route middleware groups.
*
* #var array
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
// \Illuminate\Session\Middleware\AuthenticateSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
/*
'api' => [
'throttle:api',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
*/
'api' => [
'throttle:240,1',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
// \App\Http\Middleware\VerifyCsrfToken::class,
// \App\Http\Middleware\JsonMiddleware::class,
]
];
/**
* The application's route middleware.
*
* These middleware may be assigned to groups or used individually.
*
* #var array
*/
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
'can' => \Illuminate\Auth\Middleware\Authorize::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
/*
* Permisos
*/
'permission' => \App\Http\Middleware\PermissionMiddleware::class,
'rolpermission' => \App\Http\Middleware\RolesMiddleware::class,
'jwt.verify' => \App\Http\Middleware\JwtMiddleware::class,
'return-json' => \App\Http\Middleware\JsonMiddleware::class,
];
}
}
filesystem.php
<?php
return [
/*
|--------------------------------------------------------------------------
| Default Filesystem Disk
|--------------------------------------------------------------------------
|
| Here you may specify the default filesystem disk that should be used
| by the framework. The "local" disk, as well as a variety of cloud
| based disks are available to your application. Just store away!
|
*/
'default' => env('FILESYSTEM_DRIVER', 'local'),
/*
|--------------------------------------------------------------------------
| Filesystem Disks
|--------------------------------------------------------------------------
|
| Here you may configure as many filesystem "disks" as you wish, and you
| may even configure multiple disks of the same driver. Defaults have
| been setup for each driver as an example of the required options.
|
| Supported Drivers: "local", "ftp", "sftp", "s3"
|
*/
'disks' => [
'local' => [
'driver' => 'local',
'root' => storage_path('app'),
],
'public' => [
'driver' => 'local',
'root' => storage_path('app/public'),
'url' => env('APP_URL').'/storage',
'visibility' => 'public',
],
'files' => [
'driver' => 'local',
'root' => storage_path('courses_content'),
'visibility' => 'private',
],
's3' => [
'driver' => 's3',
'key' => env('AWS_ACCESS_KEY_ID'),
'secret' => env('AWS_SECRET_ACCESS_KEY'),
'region' => env('AWS_DEFAULT_REGION'),
'bucket' => env('AWS_BUCKET'),
'url' => env('AWS_URL'),
'endpoint' => env('AWS_ENDPOINT'),
],
],
/*
|--------------------------------------------------------------------------
| Symbolic Links
|--------------------------------------------------------------------------
|
| Here you may configure the symbolic links that will be created when the
| `storage:link` Artisan command is executed. The array keys should be
| the locations of the links and the values should be their targets.
|
*/
'links' => [
public_path('storage') => storage_path('app/public'),
],
];
In the front:
Data.js:
//${url_backend} it is the route from api.
export const url_media = `${url_backend}/api/media/documents`
Front
coursesData.preImgPerfilResize(formData)
.then(response => {
value = response.data.archivo
// certificacionesData.getImagen(value).then(response => {
// console.log(response);
// }).catch(error => {
// console.log(error.response)
// })
setPreImg(`${url_media}/${value}`)
console.log(`${url_media}/${value}`)
setUrlImg('')
const list = [...inputList];