Tymon\JWTAuth::toUser error: A token is required

Question

I have a Larvel API that uses Tymon\JWTAuth to authenticate the user.

It is working fine.

For some reasons I have also a non-guarded route in web.php:

Route::get('myroute', 'MyController@mymethod');

The code of MyController@mymethod is the following:

$user = JWTAuth::toUser($request->input('token'));

// I tried also this:
// JWTAuth::setToken($request->input('token'));
// $user = JWTAuth::authenticate();

And I call the route using this url in the browser: /myroute?token=eyJ0eXAiOiJKV1QiLCJhbGci....

The problem is that I have an exception in JWT.php:

Tymon \ JWTAuth \ Exceptions \ JWTException A token is required

JWT.php

protected function requireToken()
{
    if (! $this->token) {
        throw new JWTException('A token is required');
    }
}

How can I decode the token that is passed as URL parameter and not in the header of the request?

Fabry · Accepted Answer · 2022-12-03T20:06:46.707

1

I solved it using this code:

use Namshi\JOSE\SimpleJWS;

$secret = config('jwt.secret');
$jws = SimpleJWS::load($token);
if (!$jws->isValid($secret)) {
   return response()->json([], 401); // unauthorized
} 
$payload = $jws->getPayload();
$account = Account::find($payload["account"]["id"]);

However I would have preferred to use directly JWTAuth

edited Dec 03 '22 at 20:06

answered Jun 13 '18 at 18:54

Fabry

1,498
4
23
47

how do you get user object from this? – devmrh Apr 26 '21 at 08:01

score 1 · Answer 2 · edited Mar 09 '20 at 19:17

1

Instead of

$user = JWTAuth::toUser($request->input('token'));

Use

$user = $this->jwt->User();

edited Mar 09 '20 at 19:17

johannchopin

13,720
10
55
101

answered Oct 01 '18 at 18:50

m yadav

1,783
2
11
13

score 1 · Answer 3 · answered Jan 14 '19 at 06:45

1

If you are using jwt-auth dev, the toUser method in old version will drop the error like above, try this:

// Get the currently authenticated user
$user = auth()->user();

If the user is not then authenticated, then null will be returned.

answered Jan 14 '19 at 06:45

Tai Ly

306
4
17

OP is asking how they can decode `$token` when sending as query parameters – Raymond Ativie Feb 23 '22 at 06:13

Tymon\JWTAuth::toUser error: A token is required

3 Answers3

Linked