使用laravel Passport中的授权码授权登录第三方应用程序无效

Question

我试图使用授权代码授予登录第三方客户端在护照Oauth服务器。

Route::get('/redirect', function (Request $request) {
    $query = http_build_query([
        'client_id' => 3,
        'redirect_uri' => 'http://127.0.0.1:8001/callback',
        'response_type' => 'code',
        'scope' => '',
        'state' => \Str::random(40),
    ]);

    return redirect('http://127.0.0.1:8000/oauth/authorize?' . $query);
});

Route::get('/callback', function (Request $request) {
    $response = (new GuzzleHttp\Client)->post('http://127.0.0.1:8000/oauth/token', [
        'form_params' => [
            'grant_type' => 'authorization_code',
            'client_id' => 3, 
            'client_secret' => 'Ux6p201tRFrPQ5lLZI1RMce1GYD6qTJ9Qvj7nM2Z',
            'redirect_uri' => 'http://127.0.0.1:8001/callback',
            'code' => $request->code,
        ]
    ]);
    session()->put('token', json_decode((string)$response->getBody(), true));

    return redirect('/todos');
});

Route::get('/todos', function () {
    $response = (new GuzzleHttp\Client)->get('http://127.0.0.1:8000/api/todos', [
        'headers' => [
            'Authorization' => 'Bearer ' . session()->get('token.access_token')
        ]
    ]);

    return json_decode((string)$response->getBody(), true);
});

在oauth服务器中，我创建了id为3 secret:Ux6p201tRFrPQ5lLZI1RMce1GYD6qTJ9Qvj7nM2Z回调的客户机：'http://127.0.0.1:8001/callback'

但当我从第三方应用程序创建请求/重定向时，我得到：未经验证的401和重定向到登录，我也尝试添加

  Passport::$ignoreCsrfToken = true;

在AuthServiceProvider中。但仍然不起作用。有人能帮我吗？

Answer 1

类似的问题已经在Laravel Passport github存储库中列出

要解决此错误，请在AuthServiceProvider文件中添加::

https://github.com/laravel/passport/issues/839