Laravel 自定义登录验证的守护和提供者以及代码实现

青旅半醒 2023-10-06 17:16 1阅读 0赞

## Laravel 自定义登录验证的守护和提供者以及代码实现 ##

Laravel 使得实现身份验证非常简单。 事实上，几乎所有的配置都是现成的。 身份验证配置文件位于 config/auth.php， 其中包含几个有良好文档记录的选项，用于调整身份验证服务的行为。在其核心，Laravel 的认证设施由「守卫」和「提供者」组成。

守卫决定如何对每个请求的用户进行身份验证比如，Laravel 带有一个 session 保护，它使用会话存储和 Cookies 来维护状态。提供者决定如何从持久储存中检索用户。 Laravel 支持使用 Eloquent 和数据库查询生成器检索用户。但是，你可以根据应用程序的需要来自由定义其他提供者。

### 1.自定义守护 ###

'guards' => [
            'web' => [
                'driver' => 'session',
                'provider' => 'users',
            ],
    
            'api' => [
                'driver' => 'token',
                'provider' => 'users',
                'hash' => false,
            ],
    
            //自定义 guards
            'pc' => [
                'driver' => 'session',
                'provider' => 'user',
            ],
        ],

### 2.自定义数据提供 ###

'providers' => [
            'users' => [
                'driver' => 'eloquent',
                'model' => App\Models\User\User::class,
            ],
    
            // 'users' => [
            //     'driver' => 'database',
            //     'table' => 'users',
            // ],
    
            //自定义 providers
            'user' => [
                'driver' => 'eloquent',
                'model' => App\Models\User\User::class, //用户模型命名空间
            ],
        ],

### 3.自定义密码重置 ###

'passwords' => [
            'users' => [
                'provider' => 'users',
                'table' => 'password_resets',
                'expire' => 60,
                'throttle' => 60,
            ],
    
            //自定义 passwords
            'user' => [
                'provider' => 'user',
                'table' => 'password_resets',
                'expire' => 60,
                'throttle' => 60,
            ],
        ],

### 4.判断登录，用户名和密码是否正确 ###

$result = Auth::guard('pc')->attempt($data);
    if ($result == false) {
        
        return '登录失败';
    }else{
        
        return '登录成功';
    }

### 5.检测是否已登录 ###

if (Auth::guard('pc')->check()) {
        
        return '已登录';
    }

### 6.退出登录 ###

Auth::guard('pc')->logout();
    $request->session()->invalidate();
    return  '退出成功';

### 7.单独验证密码是否正确 ###

$user = User::where($where)->first();
    if (!$user || !Hash::check($data['password'], $user->password)) {
        
        return  '登录名或密码有误';
    }

### 8.生成密码 ###

Hash::make('123456');

### config/auth.php测试项目文件 ###

<?php
    
    return [
    
        /*
        |--------------------------------------------------------------------------
        | Authentication Defaults
        |--------------------------------------------------------------------------
        |
        | This option controls the default authentication "guard" and password
        | reset options for your application. You may change these defaults
        | as required, but they're a perfect start for most applications.
        |
        */
    
        'defaults' => [
            'guard' => 'web',
            'passwords' => 'users',
        ],
    
        /*
        |--------------------------------------------------------------------------
        | Authentication Guards
        |--------------------------------------------------------------------------
        |
        | Next, you may define every authentication guard for your application.
        | Of course, a great default configuration has been defined for you
        | here which uses session storage and the Eloquent user provider.
        |
        | All authentication drivers have a user provider. This defines how the
        | users are actually retrieved out of your database or other storage
        | mechanisms used by this application to persist your user's data.
        |
        | Supported: "session", "token"
        |
        */
    
        'guards' => [
            'web' => [
                'driver' => 'session',
                'provider' => 'users',
            ],
    
            'api' => [
                'driver' => 'jwt',
                'provider' => 'users',
                'hash' => false,
            ],
        ],
    
        /*
        |--------------------------------------------------------------------------
        | User Providers
        |--------------------------------------------------------------------------
        |
        | All authentication drivers have a user provider. This defines how the
        | users are actually retrieved out of your database or other storage
        | mechanisms used by this application to persist your user's data.
        |
        | If you have multiple user tables or models you may configure multiple
        | sources which represent each model / table. These sources may then
        | be assigned to any extra authentication guards you have defined.
        |
        | Supported: "database", "eloquent"
        |
        */
    
        'providers' => [
            'users' => [
                'driver' => 'eloquent',
                'model' => App\User::class,
            ],
    
            // 'users' => [
            //     'driver' => 'database',
            //     'table' => 'users',
            // ],
        ],
    
        /*
        |--------------------------------------------------------------------------
        | Resetting Passwords
        |--------------------------------------------------------------------------
        |
        | You may specify multiple password reset configurations if you have more
        | than one user table or model in the application and you want to have
        | separate password reset settings based on the specific user types.
        |
        | The expire time is the number of minutes that the reset token should be
        | considered valid. This security feature keeps tokens short-lived so
        | they have less time to be guessed. You may change this as needed.
        |
        */
    
        'passwords' => [
            'users' => [
                'provider' => 'users',
                'table' => 'password_resets',
                'expire' => 60,
            ],
        ],
    
    ];