JWT Auth token not invalidating after logout in Lumen 5.4 - php

Question

I had a fresh Lumen 5.4 installation and followed this tutorial. Login and others work fine but the logout doesn't seem to work properly. What I mean is, if I try to expire a token it doesn't give me an error but if the same token(the one that was just expired) is re-used, it should say expired but still goes through and gets me the data. In simple terms, I believe it is not expiring the token at all. Below is my code:
UserController code:
class UserController extends Controller
{
protected $jwt;
public function __construct(JWTAuth $jwt)
{
$this->jwt = $jwt;
}
public function Signin(Request $request)
{
$this->validate($request, [
'email' => 'required|email|max:100',
'password' => 'required|min:6',
]);
if (!$token = $this->jwt->attempt($request->only('email', 'password'))) {
return response()->json(['The credentials provided are invalid.'], 500);
}
return response()->json(compact('token'));
}
public function LogoutUser(Request $request){
$this->jwt->invalidate($this->jwt->getToken());
return response()->json([
'message' => 'User logged off successfully!'
], 200);
}
}
routes:
$app->group(['prefix' => 'api'], function($app){
$app->post('/signup', [
'uses' => 'UserController#Signup'
]);
$app->group(['middleware' => 'auth:api'], function($app){
$app->post('/logout',[
'uses' => 'UserController#LogoutUser'
]);
});
});
config/auth.php:
'defaults' => [
'guard' => env('AUTH_GUARD', 'api'),
],
'guards' => [
'api' => [
'driver' => 'jwt',
'provider' => 'users'
],
],
'providers' => [
'users' => [
'driver' => 'eloquent',
'model' => \App\User::class,
],
],
'passwords' => [
//
],
Any help will be greatly appreciated.

Answer 1

I have now got it working and leave behind the steps so if anybody else faces the same issue. The fix was to use CACHE_DRIVER=file in the .env file. I am not exactly sure why or how this fixes it but some research led me to this and was a result of trial and error things.

Answer 2

i find something may cause this problem.
see Tymon\JWTAuth\Providers\Storage\Illuminate
public function add($key, $value, $minutes)
{
// If the laravel version is 5.8 or higher then convert minutes to seconds.
if ($this->laravelVersion !== null
&& is_int($minutes)
&& version_compare($this->laravelVersion, '5.8', '>=')
) {
$minutes = $minutes * 60;
}
$this->cache()->put($key, $value, $minutes);
}
my cache driver is redis and when i invalidate a token, this function will be invoded。
Obviously $this->laravelVersion is null in lumen.
I just solved my issue
copy Tymon\JWTAuth\Providers\Storage\Illuminate to other folder
in my case, i copy to app\Providers\Storage\Illuminate
modify the add function
public function add($key, $value, $minutes)
{
$seconds = $minutes * 60;
$this->cache()->put($key, $value, $seconds);
}
remember change the namespace.
then modify the config/jwt
#'storage' => Tymon\JWTAuth\Providers\Storage\Illuminate::class,
'storage' => App\Providers\Storage\Illuminate::class,
Hope it helps