Slim3 JWT authentication example

This is an example of implementation of JWT authentication on the server side, using Slim3. This code can be used in pair with
the ionic2 jwt sample a sample code on JWT via an Ionic2 app.

Running locally

Clone or download the repository

You have to create a database named tokens which should contain a single table named tokens with the following structure:

  CREATE TABLE `tokens` (
    `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
    `value` text,
    `user_id` int(11) DEFAULT NULL,
    `date_created` int(11) DEFAULT NULL,
    `date_expiration` int(11) DEFAULT NULL,
    PRIMARY KEY (`id`)
  ) ENGINE=InnoDB DEFAULT CHARSET=utf8;

Be sure that your database configuration match the specification under /src/settings.php
Check that all is ok by entering into the downloaded repository and launching phpunit using the following command
```
$ ./vendor/bin/phpunit
```
You should see
```
OK (4 tests, 8 assertions)
```

You can now launch the server by typing

php -S 0.0.0.0:8080 -t public public/index.php

You are ready to send requests to the server. Check /tests/Functional/RoutesTest.php to see what you can do.

Routes

Two routes were created:

An authentication route which allows us to get the credentials and the token sent from the client for validation.
```
$app->post('/authenticate', function (Request $request, Response $response) {
  // ...
})
```
A route which handle a get request for requiring restricted resource to test out our JWT implementation. This route expected
that a token is set on the authorisation header of the request. The token will be validated and if it succeed, we return
the requested resource to the client.
```
$app->get('/restricted', function (Request $request, Response $response) {
  // ...
})
```

Dependencies

We used [firebase/php-jwt] (https://github.com/firebase/php-jwt) for creating and decoding the JSON web token.

Storage

For simplicity sake, users credentials are stored in a JSON file named users.json located at the root of the project.
A database containing a single table named tokens allows us to store each token related information. Database
connexion is configured inside /src/dependencies.php.

Middleware

We created a middleware under the /src/middleware.php file in order to enable CORS.

License

MIT