How to set JWT token expiary life time in Laravel 8?

Asked Dec 31 '20 at 07:18

Active Dec 31 '20 at 07:18

Viewed 894 times

I am using Laravel 8 and implement API's. Everything is working fine but token expire after sometime in mobile app. There is any way to set token expiry until user logout from mobile device. I have read articles and perform some changes but still stuck in this issue. In Config/jwt.php i have change like this,

//    'ttl' => env('JWT_TTL', 60),
'ttl' => env('JWT_TTL', null),

and

    'required_claims' => [
    'iss',
    'iat',
    'nbf',
    'sub',
    'jti',
],

//    'required_claims' => [
//        'iss',
//        'iat',
//        'exp',
//        'nbf',
//        'sub',
//        'jti',
//    ],

In auth controller i have login as,

$user = User::where('mobile', $request['mobile'])->first();

    if ($user){
        if(!$token = JWTAuth::fromUser($user)){
            return $this->responseWithError('Phone Number is Incorrect!', Response::HTTP_UNAUTHORIZED);
        }
    }else{
        return $this->responseWithError('Phone Number does not exist!', Response::HTTP_OK);
    }

Anyone can help me how to solve this issue?

asked Dec 31 '20 at 07:18

Irshad Khan

As of today `env('JWT_TTL', null)` may not work. The reasons are described here: https://github.com/tymondesigns/jwt-auth/issues/1979 – P. K. Tharindu Dec 31 '20 at 07:56
Then what's for today? – Irshad Khan Dec 31 '20 at 08:05
You could set it to a longer duration. But you should be looking at refresh token behavior IMHO. Because the longer the token is valid, the more time the hackers will have to break it. – P. K. Tharindu Dec 31 '20 at 08:13
How to set longer duration? – Irshad Khan Dec 31 '20 at 08:47
you can do `env('JWT_TTL', 1000000)` – P. K. Tharindu Dec 31 '20 at 08:49
First i add it in env? Please can you explain it. Thanks for your time – Irshad Khan Dec 31 '20 at 08:50
Sure! add a line `JWT_TTL=1000000` to your .env file and maybe run `php artisan cache:clear` – P. K. Tharindu Dec 31 '20 at 08:53
Another thing is that if user is logout then mobile app developer getting error 401 not proper response how can i handle this? – Irshad Khan Dec 31 '20 at 08:54
After php artisan cache:clear i got this error Failed to clear cache. Make sure you have the appropriate permissions. – Irshad Khan Dec 31 '20 at 08:56
Check here: https://stackoverflow.com/a/52330607/4886202 – P. K. Tharindu Dec 31 '20 at 09:07

How to set JWT token expiary life time in Laravel 8?

0 Answers0