【记录撸一个博客系统】11.登陆注册-看看laravel自带的鉴权源码分析

梦里梦外; 2022-11-28 00:46 12阅读 0赞

## 浅析 ##

### 入口 ###

![在这里插入图片描述][20200816165002794.png_pic_center]

### Model ###

<?php
    
    namespace App;
    
    use Illuminate\Contracts\Auth\MustVerifyEmail;
    //注意这里
    use Illuminate\Foundation\Auth\User as Authenticatable;
    use Illuminate\Notifications\Notifiable;
    
    class User extends Authenticatable
    {
        use Notifiable;
    
        /**
         * The attributes that are mass assignable.
         * 批量赋值的属性
         *
         * @var array
         */
        protected $fillable = [
            'name', 'email', 'password',
        ];
    
        /**
         * The attributes that should be hidden for arrays.
         * 隐藏属性
         *
         * @var array
         */
        protected $hidden = [
            'password', 'remember_token',
        ];
    
        /**
         * The attributes that should be cast to native types.
         *
         * @var array
         */
        protected $casts = [
            'email_verified_at' => 'datetime',
        ];
    }

Illuminate\\Foundation\\Auth\\User

namespace Illuminate\Foundation\Auth;
    
    use Illuminate\Auth\Authenticatable;
    use Illuminate\Auth\MustVerifyEmail;
    use Illuminate\Auth\Passwords\CanResetPassword;
    use Illuminate\Contracts\Auth\Access\Authorizable as AuthorizableContract;
    use Illuminate\Contracts\Auth\Authenticatable as AuthenticatableContract;
    use Illuminate\Contracts\Auth\CanResetPassword as CanResetPasswordContract;
    use Illuminate\Database\Eloquent\Model;
    use Illuminate\Foundation\Auth\Access\Authorizable;
    
    class User extends Model implements
        AuthenticatableContract,
        AuthorizableContract,
        CanResetPasswordContract
    {
        use Authenticatable, Authorizable, CanResetPassword, MustVerifyEmail;
    }
    //这里引用了4个类

不具体跳进去了，大致看下

*  Authenticatable, 规范了一些认证系统必须给出的方法。
 *  Authorizable,规范了一些可以做和不可做的规范，要求模型中必须提供。
 *  CanResetPassword, 规范了一些为了忘记密码必须给出的方法。
 *  MustVerifyEmail;规范了一些为了邮箱认证必须给出的方法。

简单地说，都是规范，为了组件式开发做铺垫，给出规范，只要你按照规范开发，你的认证组件就可以完美在框架运行。（面向接口编程）

![在这里插入图片描述][20200816170557740.png_pic_center]

### 监听 ###

<?php
    
    namespace App\Providers;
    
    //注意这里
    use Illuminate\Auth\Events\Registered;
    use Illuminate\Auth\Listeners\SendEmailVerificationNotification;
    use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;
    use Illuminate\Support\Facades\Event;
    
    class EventServiceProvider extends ServiceProvider
    {
        /**
         * The event listener mappings for the application.
         *
         * @var array
         */
        protected $listen = [
            Registered::class => [
                SendEmailVerificationNotification::class,
            ],
        ];
    
        /**
         * Register any events for your application.
         *
         * @return void
         */
        public function boot()
        {
            parent::boot();
    
            //
        }
    }

然后在`vendor\laravel\framework\src\Illuminate\Auth\SessionGuard.php`  
添加了一系列监听

/**
         * Register an authentication attempt event listener.
         *
         * @param  mixed  $callback
         * @return void
         */
        public function attempting($callback)
        {
            if (isset($this->events)) {
                $this->events->listen(Events\Attempting::class, $callback);
            }
        }

先写到这里，后面有更深刻的理解再补充。

[20200816165002794.png_pic_center]: /images/20221124/cdddfd50bc1141d39188d55613c2af47.png
[20200816170557740.png_pic_center]: /images/20221124/1f3139b395a14de88c95038791fcc73b.png