How do we customise the claims?

[kirkbushell]

I have a "multi-tenant" game application, and instead of having to store the accessed account in the URL, I want it to be part of the JWT token payload. So, a user can login to an account, and that account will be stored as part of the payload.

However, I also want them to be able to switch accounts. This would involve another endpoint, and then I issue the user a new token to be used.

On subsequent requests I would check check the game they've switched to and double-check they can access.

But this saves having to swap domains or have a URL prefix (which I don't want, in this context it doesn't make any sense).

[azzumed]

use customClaims method

[Ramazanonat]

use customClaims method

i did that.

Add those on User model // public function getJWTIdentifier() { return $this->getKey(); }

public function getJWTCustomClaims()
{
    return $this->jwtCustomClaims;
}

public function setJWTCustomClaims(array $claims)
{
    $this->jwtCustomClaims = $claims;
}

// then u can use setJWTCustomClaims method like that. // if (Auth::attempt(['email' => $request->email, 'password' => $request->password])) { $user = Auth::user(); $user->setJWTCustomClaims(['test' => 'test']); $token = JWTAuth::fromUser($user);

        return response()->json([
            'success' => true,
            'token' => $token,
            'user' => $user,
        ]);
    }

//