Lexikjwtauthenticationbundle: Using id field instead of username for finding users in database

[pdoreau]

I don't use any username. User login is made by email / password. Email can change so it's not suitable to store it in the JWT token as the identifying field.
User id seems to be the only field I can rely on for both JWT payload identitfying field and for the lookup in database.
How can I configure the bundle to do it ?

[Luckystrike561]

Hi any solution for your issue ? I have exactly the same ;)

[pdoreau]

@Luckystrike561 It seems ok with :

• id as user_identity_field (config.yml)
• a custom JWTTokenAuthenticator using findOneById (userRepository)

Is that a good / recommended way ?

[chalasr]

@pdoreau I think it can be simpler:

1) id as user_identity_field
2) the symfony built-in entity provider configured to use id as property to load users
yaml security: providers: db_provider: entity: class: AppBundle:User property: id

Note: 2) can be replaced by a custom user provider, while it is able to load users based on the configured user_identity_field.

[chalasr]

(Apologies for the delay)

[Luckystrike561]

Hi thank for reply but I'm working in NoSQL (mogodb) and after some research I didn't find any configuration like you for "Document base" I will look for @pdoreau solution.

[chalasr]

Isn't https://github.com/lexik/LexikJWTAuthenticationBundle/issues/386#issuecomment-327872930 what you are looking for?

[chalasr]

Closing due to the lack of feedback, feel free to reopen.

[bartoll7]

I have the same problem. Do you have any working solution or code example?

[pdoreau]

@bartoll7 yes it works well with the solution I mentioned :

• add user_identity_field: id to your lexik_jwt_authentication config
• create a class with the following code extending AbstractGuardAuthenticator and use it in your security.firewall.[your_firewall_name].guard.authenticators config

protected function loadUser(UserProviderInterface $userProvider, array $payload, $identity)
{
    if (!$identity) {
        throw new AuthenticationException('Invalid JWT Token');
    }
    return $this->userRepository->findOneById($identity);
}