投稿時間:2022-11-12 17:04:49 RSSフィード2022-11-12 17:00 分まとめ(5件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
IT	気になる、記になる…	Amazon、Kindleストアで講談社のタイトルの複数セールを開催中 − ｢ハードボイルド&アウトロー小説特集｣など	https://taisy0.com/2022/11/12/164953.html	amazon	2022-11-12 07:07:15
海外TECH	DEV Community	Symfony 6 and JWT bundles: Refresh token	https://dev.to/nabbisen/symfony-6-and-jwt-bundles-refresh-token-2jlj	Symfony and JWT bundles Refresh token The cover image is originally by geralt and edited with great appreciation SummaryAre you interested in JSON Web Token JWT authentication and authorization in PHP or Symfony one of its frameworks If so this post might be helpful Symfony and Lexik JWT Bundle Auth with JSON Web Token Heddi Nabbisen・Nov ・ min read php symfony jwt authentication Well lifetime of each access token should be short within practical term in order to mitigate risk on impersonation However when access token is expired what should we do Request authentication information to users again It must be inconvenient in many cases mustn t it That s where refresh token steps in This post shows how to implement it in Symfony with JWTRefreshTokenBundle Here we go EnvironmentAlpine Linux on Docker PHP Symfony LexikJWTAuthenticationBundle JWTRefreshTokenBundle MariaDB Tutorial OverviewRemember you need install LexikJWTAuthenticationBundle and configure your app beforehand The steps here are as follows Install the bundlePHP specific operation currently Update databaseConfigureTesting Install the bundleJWTRefreshTokenBundle is almost in your hand with composer Run composer require gesdinet jwt refresh token bundleThe output started with Info from StandWithUkraineUsing version for gesdinet jwt refresh token bundle composer json has been updatedRunning composer update gesdinet jwt refresh token bundleLoading composer repositories with package informationUpdating dependenciesLock file operations install updates removals Locking gesdinet jwt refresh token bundle v Writing lock fileInstalling dependencies from lock file including require dev Package operations install updates removals Downloading gesdinet jwt refresh token bundle v Installing gesdinet jwt refresh token bundle v Extracting archiveGenerating optimized autoload files packages you are using are looking for funding Use the composer fund command to find out more Then it was followed by Symfony operations recipe afcdbadca WARNING gesdinet jwt refresh token bundle gt From github com symfony recipes contrib main The recipe for this package comes from the contrib repository which is open to community contributions Review the recipe at Read the warning carefully and enter y to continue Do you want to execute this recipe y Yes n No a Yes for all packages only for the current installation session p Yes permanently never ask again for this project defaults to n yThe rest was Configuring gesdinet jwt refresh token bundle gt From github com symfony recipes contrib mainExecuting script cache clear OK Executing script assets install public OK What s next Some files have been created and or updated to configure your new packages Please review edit and commit them these files are yours No security vulnerability advisories found Adapt it to PHP currently Well there was a problem It was unfamiliar with PHP and Symfony by default because it uses annotations However what was required without Symfony flex was attributes To fix it edit src Entity RefreshToken php ORM Entity ORM Table refresh tokens ORM Entity ORM Table name refresh token Then run composer install Update databaseYou are perhaps familiar with these command lines Run them php bin console make migration php bin console doctrine migrations migrate Configure routes and firewalls for refresh tokensEdit config routes yaml jwt auth path auth jwt refresh path auth refreshThen edit config packages security yaml security firewalls jwt auth pattern auth stateless true json login check path jwt auth success handler lexik jwt authentication handler authentication success failure handler lexik jwt authentication handler authentication failure api pattern api stateless true jwt refresh jwt check path jwt refresh Note Only the first access control that matches will be used access control path auth roles PUBLIC ACCESS path api roles IS AUTHENTICATED FULLY In addition alternatively you may want to integrate API routes of both auth and use config routes yamljwt auth path api authjwt refresh path api auth refresh config packages security yamlsecurity firewalls api pattern api stateless true json login check path jwt auth success handler lexik jwt authentication handler authentication success failure handler lexik jwt authentication handler authentication failure jwt entry point jwt refresh jwt check path jwt refresh access control path api auth roles PUBLIC ACCESS path api roles IS AUTHENTICATED FULLY That s it Let s play API access with JWTJust as my previous post connect to auth with curl to get token curl X POST H Content Type application json d username your username password your password https your domain authYou will get refresh token as well as access token token xxx xxx xxx refresh token xxx Gotcha Let s try a few with the refresh token Case of missing curl X POST https your domain auth refresh code message Missing JWT Refresh Token Case of an invalid one curl X POST d refresh token wrong value https your domain auth refresh code message JWT Refresh Token Not Found Case of the valid one curl X POST d refresh token xxx https your domain auth refresh token xxx xxx xxx refresh token xxx Yay here come new tokens of yours	2022-11-12 07:07:47
ニュース	BBC News - Home	The Papers: 'Rumble in the jungle' and Raab staff 'given route out'	https://www.bbc.co.uk/news/blogs-the-papers-63605437?at_medium=RSS&at_campaign=KARANGA	The Papers x Rumble in the jungle x and Raab staff x given route out x Matt Hancock s Covid grilling on I m a Celebrity and civil servants avoiding the justice secretary are among Saturday s front page stories	2022-11-12 07:10:28
ニュース	BBC News - Home	US midterm elections results: How the parties are doing in maps and charts	https://www.bbc.co.uk/news/world-us-canada-63556122?at_medium=RSS&at_campaign=KARANGA	elections	2022-11-12 07:35:25
北海道	北海道新聞	ロシア軍、ヘルソン州ダム攻撃か　米企業、衛星画像を公開	https://www.hokkaido-np.co.jp/article/759665/	衛星画像	2022-11-12 16:02:00