Laravel 10 Passport认证：调用Logout接口提示Route [login]未定义如何解决？

我使用Laravel 10和Passport实现身份认证，API路由、auth配置及AuthController相关方法如下。登录接口调用正常，但调用logout接口时抛出如下错误：

Symfony\Component\Routing\Exception\RouteNotFoundException: Route [login] not defined. in file F:\2024\Authentication System\backend\vendor\laravel\framework\src\Illuminate\Routing\UrlGenerator.php on line 477

相关代码 #

API路由（api.php） #

Route::prefix('v1')->group(function (){
    Route::post('/login',[AuthController::class,'login']);
    Route::post('/register',[AuthController::class,'register']);

    Route::middleware('auth:api')->group(function () {
        Route::post('/logout',[AuthController::class, 'logout']);
        Route::get('/users/{id}',[AuthController::class, 'show']);
    });
    
});

auth.php 配置 #

'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],
        'api' => [
            'driver' => 'passport',
            'provider' => 'users',
            'hash' => false,
        ],
    ],

AuthController 相关方法 #

public function login(Request $request)
{
    $validator = Validator::make($request->all(), [
       
        "email" => "required",
        "password" => "required",
    ]);

    if ($validator->fails())
        return send_error('Validation error', $validator->errors(), 422);

        $credentials = $request->only('email','password');

        if(Auth::attempt($credentials)){
            $user = Auth::user();
            $data['name'] = $user->name;
            $data['access_token'] = $user->createToken('accessToken')->accessToken;

            return send_response('You are successfully logedin.',$data);
        }else {
            return send_error('Unauthorized','',401);
        }
}

public function register(Request $request)
{
    $validator = Validator::make($request->all(), [
        "name" => "required|min:4",
        "email" => "required|email|unique:users",
        "password" => "required|min:6"
    ]);

    if ($validator->fails())
        return send_error('Validation error', $validator->errors(), 422);

        try {

            $user = User::create([
                'name' => $request->name,
                'email' => $request->email,
                'password' => Hash::make($request->password),
            ]);

            $data = [
                'name' => $user->name,
                'email' => $user->email
            ];

            return response()->json([
                'status' => true,
                'message' => 'User Registration Sucess!',
                'name' => $user->name

            ]);

            return send_response('User Registration Sucess!', '$data');

        }catch (Exception $e) {
            return send_error($e->getMessage(), $e->getCode());
        }
}

public function logout(Request $request)
{
    return 'test';
}

1. 根源分析 #

这个错误是因为auth:api中间件在认证失败时，默认会尝试跳转至web guard对应的login路由，但你的API项目中并未定义该路由。

2. 修复步骤 #

方法一：自定义API认证失败响应

修改app/Exceptions/Handler.php，添加API请求的认证失败处理逻辑，直接返回JSON格式的401响应，避免跳转：

use Illuminate\Auth\AuthenticationException;

public function render($request, Throwable $exception)
{
    if ($exception instanceof AuthenticationException && $request->expectsJson()) {
        return response()->json(['message' => 'Unauthorized'], 401);
    }

    return parent::render($request, $exception);
}

方法二：确保请求正确携带Token

调用logout接口时，必须在请求头中携带登录时获取的Access Token：

• 在Postman中添加请求头：Authorization: Bearer {你的access_token}
• 确认请求方法为POST，路径正确（如/api/v1/logout）

方法三：完善Logout逻辑（可选）

当前logout方法仅返回测试文本，建议补充Token销毁逻辑：

public function logout(Request $request)
{
    $request->user()->token()->revoke();
    return send_response('Successfully logged out', []);
}

内容的提问来源于stack exchange，提问作者Matakoththuwakoni