问题:

$this->auth->guard('api')->checkOrFail(); 不能拦截，并且后续打印当前用户为空

流程：

中间件代码


public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
{
try {
$this->auth->guard('api')->checkOrFail();

    }catch (TokenExpiredException $e){

        var_dump(2231);
        if ($e->getMessage() == 'Token has expired') {

            return $this->response->json(
                [
                    'code' => 401,
                    'data' => [],
                    'msg'  => '登陆失效'
                ]
            );

// throw new \Exception($e->getMessage()); }

    }catch (TokenInvalidException $exception){

        return $this->response->json(
            [
                'code' => 401,
                'data' => [],
                'msg'  => 'token错误'
            ]
        );

// throw new \Exception($exception->getMessage());

    }catch (\Throwable $throwable){

        $msg = $throwable->getMessage() == 'A token is required' ? '没有TOKEN' : '请登录';
        return $this->response->json(
            [
                'code' => 401,
                'data' => [],
                'msg'  => $msg
            ]
        );

    }

    return $handler->handle($request);
}


> 控制器
```php
    public function ti(TiRequest $request): array
    {
        $post = $request->validated();

        $user = $this->auth->guard('api')->user();

        var_dump($user ); 
    }

版本

"hyperf-ext/auth": "^2.1",
"hyperf-ext/jwt": "^2.1",

jwt.php配置


<?php

declare(strict_types=1); /**

This file is part of hyperf-ext/jwt
@link https://github.com/hyperf-ext/jwt
@contact eric@zhu.email

@license https://github.com/hyperf-ext/jwt/blob/master/LICENSE / return [ /	--------------------------------------------------------------------------	JWT Authentication Secret
Don't forget to set this in your .env file, as it will be used to sign
your tokens. A helper command is provided for this:
`php bin/hyperf.php gen:jwt-secret`
Note: This will be used for Symmetric algorithms only (HMAC),
since RSA and ECDSA use a private/public key pair (See below).
Note: This value must be encoded by base64.

'secret' => env('JWT_SECRET'),

/*	--------------------------------------------------------------------------	JWT Authentication Keys
The algorithm you are using, will determine whether your tokens are
signed with a random string (defined in `JWT_SECRET`) or using the
following public and private keys. A helper command is provided for this:
`php bin/hyperf.php gen:jwt-keypair`
Symmetric Algorithms:
HS256, HS384 & HS512 will use `JWT_SECRET`.
Asymmetric Algorithms:
RS256, RS384 & RS512 / ES256, ES384 & ES512 will use the keys below.

'keys' => [ /*	--------------------------------------------------------------------------	Public Key
Your public key content.

*/

'public' => env('JWT_PUBLIC_KEY'),

/*
|--------------------------------------------------------------------------
| Private Key
|--------------------------------------------------------------------------
|
| Your private key content.
|
*/

'private' => env('JWT_PRIVATE_KEY'),

/*
|--------------------------------------------------------------------------
| Passphrase
|--------------------------------------------------------------------------
|
| The passphrase for your private key. Can be null if none set.
|
| Note: This value must be encoded by base64.
|
*/

'passphrase' => env('JWT_PASSPHRASE'),

/*	--------------------------------------------------------------------------	JWT time to live
Specify the length of time (in seconds) that the token will be valid for.
Defaults to 1 hour.
You can also set this to null, to yield a never expiring token.
Some people may want this behaviour for e.g. a mobile app.
This is not particularly recommended, so make sure you have appropriate
systems in place to revoke the token if necessary.
Notice: If you set this to null you should remove 'exp' element from 'required_claims' list.

'ttl' => env('JWT_TTL', 1000000),

/*	--------------------------------------------------------------------------	Refresh time to live
Specify the length of time (in seconds) that the token can be refreshed
within. I.E. The user can refresh their token within a 2 week window of
the original token being created until they must re-authenticate.
Defaults to 2 weeks.
You can also set this to null, to yield an infinite refresh time.
Some may want this instead of never expiring tokens for e.g. a mobile app.
This is not particularly recommended, so make sure you have appropriate
systems in place to revoke the token if necessary.

'refresh_ttl' => env('JWT_REFRESH_TTL', 3600 24 14),

/*	--------------------------------------------------------------------------	JWT hashing algorithm
Specify the hashing algorithm that will be used to sign the token.
possible values: HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, ES512

'algo' => env('JWT_ALGO', 'HS512'),

/*	--------------------------------------------------------------------------	Required Claims
Specify the required claims that must exist in any token.
A TokenInvalidException will be thrown if any of these claims are not
present in the payload.

'required_claims' => [ 'iss', 'iat', // 'exp', 'nbf', 'sub', 'jti', ],

/*	--------------------------------------------------------------------------	Persistent Claims
Specify the claim keys to be persisted when refreshing a token.
`sub` and `iat` will automatically be persisted, in
addition to the these claims.
Note: If a claim does not exist then it will be ignored.

'persistent_claims' => [ // 'foo', // 'bar', ],

/*	--------------------------------------------------------------------------	Lock Subject
This will determine whether a `prv` claim is automatically added to
the token. The purpose of this is to ensure that if you have multiple
authentication models e.g. `App\User` & `App\OtherPerson`, then we
should prevent one authentication request from impersonating another,
if 2 tokens happen to have the same id across the 2 different models.
Under specific circumstances, you may want to disable this behaviour
e.g. if you only have one authentication model, then you would save
a little on token size.

'lock_subject' => true,

/*	--------------------------------------------------------------------------	Leeway
This property gives the jwt timestamp claims some "leeway".
Meaning that if you have any unavoidable slight clock skew on
any of your servers then this will afford you some level of cushioning.
This applies to the claims `iat`, `nbf` and `exp`.
Specify in seconds - only if you know you need it.

'leeway' => env('JWT_LEEWAY', 0),

/*	--------------------------------------------------------------------------	Blacklist Enabled
In order to invalidate tokens, you must have the blacklist enabled.
If you do not want or need this functionality, then set this to false.

'blacklist_enabled' => env('JWT_BLACKLIST_ENABLED', true),

/*	-------------------------------------------------------------------------	Blacklist Grace Period
When multiple concurrent requests are made with the same JWT,
it is possible that some of them fail, due to token regeneration
on every request.
Set grace period in seconds to prevent parallel request failure.

'blacklist_grace_period' => env('JWT_BLACKLIST_GRACE_PERIOD', 0),

/*	--------------------------------------------------------------------------	Blacklist Storage
Specify the handler that is used to store tokens in the blacklist.

'blacklist_storage' => HyperfExt\Jwt\Storage\HyperfCache::class, ];


> 代码中间件

![image](https://user-images.githubusercontent.com/30717763/111108236-679d9780-8593-11eb-94e2-5ec1adf2a4c8.png)

# 出错token

bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJodHRwOlwvXC9hcGkucm9hLmppYWJhb2xlc2hvcC5jb21cL2FwaVwvYXV0aFwvbG9naW4iLCJpYXQiOjE2MTU1MzcyMzgsImV4cCI6MTYxNjUzNzIzOCwibmJmIjoxNjE1NTM3MjM4LCJqdGkiOiJuSWR2UWNmMEhweUxxWmp5Iiwic3ViIjoxMDAwNTU1LCJwcnYiOiJmNmI3MTU0OWRiOGMyYzQyYjc1ODI3YWE0NGYwMmI3ZWU1MjlkMjRkIn0.GFCOnwmiq-YzD2F8877yr0IIyzyY_OIXIAQELRG6Ceu_FYPNd2PfdCWqm7Zw-oWGkFCNOPB2g43_XYh_uFfEug


# 运行结果
![image](https://user-images.githubusercontent.com/30717763/111108026-fa8a0200-8592-11eb-952d-e46e661bedc5.png)

# 结果非常致命， 现在我的临时解决
```php
   $user = $this->auth->guard('api')->user();

            if (empty($user)){
                //  more...
            }

问题发现

这个token应该是前n天生成的,今天偶然测试，发现checkOrFail不能拦截了

其他

我在链接中补充了常用使用方式,然后 $this->auth->guard('api')->checkOrFail(); 是大佬帮我补充的

我的.env

JWT_SECRET=MBe71G4hdUdUxROnamk4dFYkVRVY5c2BekIdvDt2ZqJuXORaQLliE8SnIPPPdRwwDLlCLTnfb4k2FdIwru/ELg==
JWT_PRIVATE_KEY="-----BEGIN ENCRYPTED PRIVATE KEY-----\nMIIJnDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQILsX69csRlUMCAggA\nMAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECLUjDd9rb6OtBIIJSBXf6Daui41H\nxMUQ8+9T3eRBE0M1QWEUeKzEau5tBJ/oErSKaqO89RUMwFj9cOjN3TDwdLadUC25\nDEIGlY9JKxVKQ38Vzd+jLcZq6Q7HfFYLbLy+WXHLRk32pVgnLXsCSn8bS4s7ZFKE\nOpR2UCOW/WxIiUoLaD7IT3Mfre4sJDcnR9EcFvb8X3/X1Tjran2eGGv8qM5DOKD9\n2FWqrCoJne47Y2ZS54bFebFZSGelN7vsQ88+6e9K3st6VkPjrXpjKAMyEB1JxJpL\n+UeJEHoRGjpkuPxfoTYw8+Aoi52E+BFZnUoqshSDbwlHCWlmMLecPSDR7DCUoSyb\nd51VYS66prdFXnaRcoMRzZK/GnoS3ctudVZbjjRuBNGqg27O0mBDU5bU3N5nicSn\n5p7v7PQUbhx39XE1tJEDWdbxl9BAgBUVMmlihielgZCW+AHsCfD1tFX3/QgOzGdP\nl2jg9lGDT5OxVZgIwFkk7A59FWhQiDya7I2DtlVPYauXFl4cDsSMpCvdlz4NUDWF\n8I+4OFDASAFpqVrJeyDT2dISAEdKu89gbqJj5pEEKtPng3P4zivQzBIF96YcCPVP\nsF78rk3nse/L0D//GqVl5Ye8n8iH8c9cKPJbvKUAhYXDCRzoUKrPIHD00Utsl/6O\nkpcRmNLV1xoNZYBBua4hmPn1Q64XMZktCZiH+ggVBndy6ggzyqcQyGTQKQGh+iJP\nMnX7CxFag4vXIMDIt4eyFILq/ANl2K9/6MVL5dJQzSHuiNDoQMdZgV+Kw+6rrJYl\nxBju+zJiOdid/ktKuixUiTW+/kp2UZOImG2LjJZWryja0CuTgoQ+zygkZlJ6NWbI\nFO8xLWsJ4uQmI7JFh3KYBHKi3yo9uNcn58TwTsUPAkTpqHJP0PCg7Ss7f1dmHKUy\nCYrYGpj5gj2u9vY9k6B8RUrOZHM5k7KrpuAgzeh2FPdSCx+FDBUnx1caxiHoeXGY\nmWk9FBPzEmIyUuwJSOMpR/HBmHhK+g2iKOOdOvHKylt7x+XR0O1zBrQGeUsxdA/9\nh19FAdEwfAzTOwaQb3w+js4sZkxZV7UJLjsrAR16MreZF8WBkEEh7WRNz97t6LVf\niJE3hMPhdYvXGDIsc+QkwB0wMZ+AsMcPHWk02SEpZ1mfvfduGFvESOAez/hR9U3P\nntAsEtOZDW+R+7YZCFvsXI526Y0/+vazecdV/zSmaXrfgcCng0tkaCoODhmUGf2N\nKvJU1Dh0di+TVhTP7WUacQzpFxGe4HqOQugQa01u+FCvNC9LKQgDBCAeCBTvkOwU\n9n38qXXHVTI+4ReDFXuI/tQ7Bj3MuVg3tQGIaGrwhioGGmU4Q9g60eJZXKVQmp0q\nFHQrT5xQQNusSkhf/jNIsYVFKIqNat7KZdxDIMO12kTNyQR/YJmhjFDBn2poZ4kk\nbshwniHz5gw8nIA6XiQ/noXf9mOo/myLRhD35oVlmIKkpzia9oB7/sOE7ZnVfGBV\nn2zpx2kiNTmFTXzxvg+yk40xbk5KPgqupn+LXj1fAPb2v4NkZlY4vUoo+f0p/ZSy\nTJxkjsqcM+PvmRK3oxaRTgY7dYuJodRKFJnH+LZJ9vtzO+apUEOm75mm2LLMy2ZE\nnChzUXpj1rf60ooV6jLWDYFrTcr5+dMaM24gQ/V0VkHVaG21rf5agdCS9a2aSDeT\nZNcJ4AdIMYntOOnxgT/j/AoitTwoIjTdxBi1fFgx2Pwf7x+msBI2SRZx39vHo37T\n+hw0limKnA+2UUqrlF1nkZpWIH7r8acZIIlfgV9UWwHILAluOnezSOlhQwBPlXjO\nbqG08t17AR23srjBZCZkpf6e6ePy8DxG85Hz3D2xAhYGJwNH0PVfGMZjGGU490zi\nQMzZ1W6vLWgWWXFBtq7/z42kT6zh+yAvsoEwAHftIokaCptfiLPva4L+k+yY8FiU\nZ0/y5aPZkYUxUMy/8s2lE2Rnd5PKDAyML8hWxeA+3zq2Dxn+CIFtW+RoUzetfR26\n1cTVYGdoNRXNGeigeoTgA+zqxlGNbCJYXv81MFUCQX3hmVkl6wE4Xy3JQQHPdH7I\nKPjfp3Q0mAkQ9KWbC+egRa977+nnqa891SC0b8hPW/pQnkztefBfuceyRUTCowSF\natD9MJkr5p75hj4lUx9AcH9wBXw+WGpOJV+JstFymmd2jQzhtwPVYsk7R+O7kuh6\ngP1fmDbAuzsdh2ZMvE2qb/B5P7q6ncmUC+JOUIr4nd3B4DYvSFFbJTWFE5V3XEZL\nWPS5RW90/Q0Lgak8CUDpvBS3PrCkEr32KCvbGiMQWeEJY0mvZvMMp2Ok16FeoZxH\n+YOvvIGUoIPxXELZJ5p/EzKYIKbta1a6H5dRbOa3MjQSatTYQ1Dps/JI3+76UUTT\nuzIzNlohMemoBXo+s3x6x8tAaDtxXTWwwkvVaSwZWMkmbjPRR1K1KkKPCP0QZFCm\nS33aGFqGD71VQvpPnRtQ/mWwIO8k1uyV4AO7uX3zS+xMvxk6k2sGjrIPc5omNjE7\nP8xovJNIXGwBPIk2JQAHWmmez5n8y1ZD7XARIQPL3IC98DIjgmaJ2MbcCjErFX8I\nojvfiTQdl5AmSUskoz51amHI58cMqlqb7oZfhV/dA2+Dlv6bNMyiJUjAzq1qUeNI\nZI76gEXTfbFJFGojCfAagcDHvU7dYq1GvtvKgdLK1PoXbw1BeORJk2MK5oI1bG5I\nYX3wz7fHChMOgitjo01NNy6R3+GCFOgVuJk+TW18vUcV81Qq+pW5BIYkekAU4XR7\nRPPUihi/Tn15vHHxo/OavAjJGzV/Wz8l8uRVmtOprEjLMZ4e37nlZKbfKjqtaH9z\nU4f6PWCZnfB8i5YCKh6ug6sveeiciHpJX1sZUkjsIQj4R+7LvUn1Dz+lVGHy2CvE\nl/PvN0iZZ3iOFievh61phR7H7bA/UldakgGMJIuehAdH1Jbv1mQ2SBGBqHqEKLjR\n/BQ3pZLZ2i13oZAXu8U+Lxs+DvHrmtuq+IZ6hP8TMSCmktDnYfYuEDbIJQJM5We3\nSLmoYvSK5b8OX5mn20t2rICw/WT0dlHgPCpW7tBXRQkI6xlZq1LnC3IXbbYuFY13\n9+SL8Ro8JXswAq5yrncXANjo+4dy9S6g2m7ig2O3bH+ofSCsNsQ/kzYVJM4BzJDy\no6xlGScpmMrnpdgeDP3zLw==\n-----END ENCRYPTED PRIVATE KEY-----\n"
JWT_PUBLIC_KEY="-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5g2w4gRFyDMZNwFVsy4p\n7+Swl9Ioxscsczs3h1LAn4NYudffKAnbcAGI1U9ZDCjZx7dTdlZ0RIn+nu05aGb6\n0dA4KPIFnD3KNuakgE79xN+Fz7e1sB7Pweg7Dt/gxsxmUrUWFZggKH2uYhUuYxWc\nnx9WKmKzOsCl6NjrR22OjIQx4TrgZgWds9ERyPxV5I989V8bKQfwkC2KxJzApnby\nmb6j//9e81GF8gKgiNBVRmzv43KLD100ZxLRG91MDNX4jN3J5ch2PGB3NRlzGOHb\nZVjeqG2HwEIAMCHtqAjtdwPkuRY9Af9nJWqEiIJU/akVsqhjCtkpC1Prfj+WNzb6\n8llC/YVruqbrIQQw8vlthZchzSeAxqYJ4VJrcDE/s92c9njYLzsErucZEdL5Uel+\nuRGwTrECCgaqKKdursGTMA08kk1h6p+FlLBVn42GLwUUM/Gx3Xf2hZxaEhb8tpTQ\nHa7Rn5suCXZxeCPx+YikLk2+sIEyYA/weW8JRohnX5933bZ8sZhSH6RXPGkZn8Yh\ncP1kyczIHJ9FIRmJEcoJA786B4FQpnDRa3y7akPcl81DtfYlG6UdbLHVrmQnKiVS\ndgWYMrGzgssIMIsw8Mn+dVzpvsypDkCK9YBzFtTal7E+ly38deBFCdR29JcCYsHb\ntZ7pWxFF5BTL1H9lwztd/6kCAwEAAQ==\n-----END PUBLIC KEY-----\n"
JWT_PASSPHRASE="i29jy/McO4/RulZTm5U0WQ=="

hyperf-ext / jwt

$this->auth->guard('api')->checkOrFail();不起作用 #10

问题:

流程：

问题发现

其他

我的.env