Styjun

Here I have some slim PHP code which is log in and a function to check whether it decode the JWT that store in the header.

$app->post('/login', function ($request, $response) 

$input = $request->getParsedBody();
$settings = $this->get('settings'); // get settings array.
$sql = "SELECT id, password FROM users WHERE id= :id";
$sth = $this->db->prepare($sql);
$sth->bindParam("id", $input['id']);
$sth->execute();
$user = $sth->fetchObject();

// verify user id 
if(!$user) 
 return $this->response->withJson(['error' => true, 'message' => 'NO ID '], 404)->withHeader('Content-type', 'application/json;charset=utf-8', 404);

// Compare the input password and the password from database for a validation
if (strcmp($input['password'],$user->password)) 
 return $this->response->withJson(['error' => true, 'message' => 'These credentials do not match our records.'], 404)->withHeader('Content-type', 'application/json;charset=utf-8', 404); 


$payload = array(
 "iat" => time(),
 "exp" => time() + 36000,
 // "id" => $input['id']
 "context" => [
 "user" => [
 "id" => $input['id']
 ]
 ]
);

try 
 $token = JWT::encode($payload, $settings['jwt']['secret'],"HS256"); // $token store the token of the user
 catch (Exception $e) 
 echo json_encode($e);



return $this->response->withJson($payload,200)
 ->withHeader('Content-type', 'application/json;charset=utf-8', 200)
 ->withAddedHeader('Authorization', $token);
);


$app->get('/get', function ($request, $response) 

$jwt = $request->getHeader("Authorization"); 
$settings = $this->get('settings'); 

$token = JWT::decode($jwt, $settings['jwt']['secret'], "HS256"); // $token store the token of the user

if ($token) 
 return $this->response->withJson($token, 200)
 ->withHeader('Content-type', 'application/json;charset=utf-8', 200);


return $this->response->withJson($token,401)
 ->withHeader('Content-type', 'application/json;charset=utf-8', 401);

);

But it when i try to run http://localhost:8080/get it returns an error which is

Argument 3 passed to FirebaseJWTJWT::decode() must be of the type array.

Why does it happen and how can i fix it?

Try to follow what the error says:

$token = JWT::decode($jwt, $settings['jwt']['secret'], ["HS256"]);

You can see the Example of using here

If i decode in the same function it returns the decoded JWT, but if i decode in other function it returns an error. How to pass the jwt to other function?

$app->post('/login', function ($request, $response) 

$key = "supersecretkeyyoushouldnotcommittogithub";

$input = $request->getParsedBody();
$settings = $this->get('settings'); // get settings array.
$sql = "SELECT id, password FROM users WHERE id= :id";
$sth = $this->db->prepare($sql);
$sth->bindParam("id", $input['id']);
$sth->execute();
$user = $sth->fetchObject();

// verify user id 
if(!$user) 
 return $this->response->withJson(['error' => true, 'message' => 'NO ID '], 404)->withHeader('Content-type', 'application/json;charset=utf-8', 404);

// Compare the input password and the password from database for a validation
if (strcmp($input['password'],$user->password)) 
 return $this->response->withJson(['error' => true, 'message' => 'These credentials do not match our records.'], 404)->withHeader('Content-type', 'application/json;charset=utf-8', 404); 


$payload = array(
 "iat" => time(),
 "exp" => time() + 36000,
 // "id" => $input['id']
 "context" => [
 "user" => [
 "id" => $input['id']
 ]
 ]
);

try 
 $token = JWT::encode($payload, $key); // $token store the token of the user
 catch (Exception $e) 
 echo json_encode($e);


// return $this->response->withJson($payload,200)
// ->withHeader('Content-type', 'application/json;charset=utf-8', 200)
// ->withHeader('Authorization', $token);

$decoded = JWT::decode($token, $key, array('HS256'));

print_r($decoded);


);