Laravel 通过 cookie 实现基于 session 的单点登录

单点登录（Single Sign On），简称为 SSO，意思是在多个应用系统中，用户只需要登录一次就可以访问所有相互信任的其它应用系统。一般常用于同一家公司的不同子系统之间的登录认证。Copy

//  passport 
composer require laravel/passport
// predis
composer require predis/predisCopy

composer create-project --prefer-dist laravel/laravel login.sso.test
composer create-project --prefer-dist laravel/laravel home.sso.test
composer create-project --prefer-dist laravel/laravel my.sso.testCopy

APP_KEY=***

DB_CONNECTION=mysql
DB_HOST=192.168.10.10
DB_PORT=3306
DB_DATABASE=sso
DB_USERNAME=homestead
DB_PASSWORD=secret

BROADCAST_DRIVER=log
CACHE_DRIVER=redis
QUEUE_CONNECTION=redis
SESSION_DRIVER=redis
SESSION_LIFETIME=120
SESSION_DOMAIN=.sso.testCopy

composer require laravel/passport
composer require predis/predisCopy

php artisan migrateCopy

php artisan passport:installCopy

composer require laravel/ui
npm install && npm run dev
// 会提示创建页面 不需要的页面可以不创建
composer require laravel/uiCopy

guards = [
        ...
         'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],
        'api' => [
            'driver' => 'passport',
            'provider' => 'users',
        ],
]Copy

protected  $middlewareGroups = [
   'web' => [
        ...
        \Laravel\Passport\Http\Middleware\CreateFreshApiToken::class,
   ],
   'api' => [
        ...
        'throttle:60,1',
        'bindings',
   ]
],Copy

// 为了方便测试 取消 token验证
Laravel\Passport\Passport::$ignoreCsrfToken = true;

Route::middleware('auth:api')->group(function () {
    Route::get('/user/{id}', function ($id) {
        return \App\User::find($id);
    });
});Copy

composer require laravel/passport
composer require predis/predisCopy

composer require laravel/ui
npm install && npm run dev
// 会提示创建页面 不需要的页面可以不创建
// 子系统不需要登录注册找回密码等页面 所以 全部选择 no
composer require laravel/uiCopy

// 创建文件夹
mkdir Extensions
// 进入目录
cd Extensions
// 创建文件
touch SsoUserProvider.phpCopy

<?php

namespace App\Exceptions;

use GuzzleHttp\Client;
use GuzzleHttp\Cookie\CookieJar;
use Illuminate\Auth\EloquentUserProvider;

class SsoUserProvider extends EloquentUserProvider
{
    public function retrieveById($identifier)
    {
        /**
        * 确保百分之百有 laravel_token 如果没有继续去登录
        */
        if (isset($_COOKIE['laravel_token']) && $_COOKIE['laravel_token']) {
            $http = new Client();
            $cookies = CookieJar::fromArray(
                [
                    'laravel_token' => $_COOKIE['laravel_token'],
                ],
                '.sso.test'
            );

            $response = $http->request(
                'GET',
                'http://login.sso.test/api/user/'.$identifier,
                [
                    'cookies' => $cookies,
                ]
            );

            $user = json_decode($response->getBody()->getContents(), true);
            $model = $this->createModel();

            $model->forceFill($user);

            return $model;
        } else {
            return redirect('http://login.sso.test/login');
        }
}Copy

 'users' => [
        'driver' => 'sso',
        'model' => App\User::class,
],Copy

use Illuminate\Support\Facades\Auth;
use App\Exceptions\SsoUserProvider;
public function boot()
{
    ...
    Auth::provider(
        'sso',
        function ($app, $config) {
  return new SsoUserProvider($app->make('hash'), $config['model']);
        }
  );
}Copy

 public function showLoginForm()
 {
     return redirect('http://login.sso.test/login');
 }Copy

public function logout(Request $request)
    {
        $http = new Client();
        $cookies = CookieJar::fromArray(
            [
            // 注意是 laravel_session 不是laravel_token
                'laravel_session' => $_COOKIE['laravel_session'],
                'XSRF-TOKEN' => $_COOKIE['XSRF-TOKEN'],
            ],
            '.sso.test'
        );

        $response = $http->request('POST', 'http://login.sso.test/logout', ['cookies' => $cookies]);

        if ($response->getStatusCode() == 200) {
            $request->session()->invalidate();

            return $this->loggedOut($request) ?: redirect('/');
        }
        abort(500);
    }Copy

 protected $except = [
        '/logout'
    ];Copy