标签：Laravel users admins Auth 认证 guard user ----------------------------------------

1.建立数据表 admins

 

 

2.找到config下的auth.php 文件，加入如下代码

<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Authentication Defaults
    |--------------------------------------------------------------------------
    |
    | This option controls the default authentication "guard" and password
    | reset options for your application. You may change these defaults
    | as required, but they're a perfect start for most applications.
    |
    */

    'defaults' => [
        'guard' => 'web',
        'passwords' => 'users',
    ],

    /*
    |--------------------------------------------------------------------------
    | Authentication Guards
    |--------------------------------------------------------------------------
    |
    | Next, you may define every authentication guard for your application.
    | Of course, a great default configuration has been defined for you
    | here which uses session storage and the Eloquent user provider.
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | Supported: "session", "token"
    |
    */

    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'token',
            'provider' => 'users',
            'hash' => false,
        ],
        //加入admin,注意:admin 和app目录的admin.php名字要一致
        'admin' => [
            'driver' => 'session',
            'provider' => 'admins'
        ]
    ],

    /*
    |--------------------------------------------------------------------------
    | User Providers
    |--------------------------------------------------------------------------
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | If you have multiple user tables or models you may configure multiple
    | sources which represent each model / table. These sources may then
    | be assigned to any extra authentication guards you have defined.
    |
    | Supported: "database", "eloquent"
    |
    */

    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\User::class,
        ],
        //admins 是刚才建立的admins表，名字同样也要保持一致
        'admins' => [
            'driver' => 'eloquent',
            'model' => App\Admin::class
        ]

        // 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Resetting Passwords
    |--------------------------------------------------------------------------
    |
    | You may specify multiple password reset configurations if you have more
    | than one user table or model in the application and you want to have
    | separate password reset settings based on the specific user types.
    |
    | The expire time is the number of minutes that the reset token should be
    | considered valid. This security feature keeps tokens short-lived so
    | they have less time to be guessed. You may change this as needed.
    |
    */

    'passwords' => [
        'users' => [
            'provider' => 'users',
            'table' => 'password_resets',
            'expire' => 60,
            'throttle' => 60,
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Password Confirmation Timeout
    |--------------------------------------------------------------------------
    |
    | Here you may define the amount of seconds before a password confirmation
    | times out and the user is prompted to re-enter their password via the
    | confirmation screen. By default, the timeout lasts for three hours.
    |
    */

    'password_timeout' => 10800,

];

　　

3.在app下建立admin.php

<?php

namespace App;

use Illuminate\Foundation\Auth\User as Authenticatable;

class Admin extends Authenticatable
{

    protected $fillable = [
        'username', 'password',
    ];

    protected $hidden = [
        //remember_token 字段用于记住我的功能
        'password', 'remember_token',
    ];
    public static $rules = [
        'username'=>'required',
        'password'=>'required'
    ];
}
?>

　　

4.建立AdminsController

<?php

namespace App\Http\Controllers;

use App\Http\Requests\UserRequest;
use Illuminate\Support\Facades\Auth;

class AdminsController extends Controller
{
    //
    public function login(){
        //echo bcrypt('123456');
        //die();
        return view('admins.login');
    }

    public function dologin(UserRequest $request){
        $credentials = $request->only('username', 'password');
        /**
         * 使用laravel自带的Auth登录
         * 1、密码使用的是hash加密 $crypt = password_hash($password, PASSWORD_DEFAULT);
         */
        if(Auth::guard('admin')->attempt($credentials)){
            return response()->json(['code' => 200, 'msg' => '登录成功']);
        }else{
            return response()->json(['code' => 403, 'msg' => '用户名或密码错误']);
        }
    }
}

　5.建立登录视图页面

 

<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css" integrity="sha384-HSMxcRTRxnN+Bdg0JdbxYKrThecOKuH5zCYotlSAcp1+c8xmyTe9GYg1l9a69psu" crossorigin="anonymous">

<div style="margin: 0 auto;width: 1000px">
    <h3>用户登录</h3>
    <hr>
    <form action="{{ url('/admins/dologin') }}" method="post">
        <div class="form-group">
            <input type="text" name="username" class="form-control" placeholder="请输入账号" style="width: 200px">
        </div>
        <div class="form-group">
            <input type="password"  name="password" class="form-control" placeholder="请输入密码" style="width: 200px">
        </div>

        <div class="form-group">
            <input type="text" name="code" class="form-control" placeholder="请输入验证码" style="width: 200px">
            <img src="{{captcha_src()}}" onclick="this.src='{{captcha_src()}}'+Math.random()">
        </div>
        @csrf
        <button type="submit" class="btn btn-info">登录</button>
        @if (count($errors) > 0)
            <div class="alert alert-danger">
                <ul>
                    @foreach ($errors->all() as $error)
                        <li>{{ $error }}</li>
                    @endforeach
                </ul>
            </div>
        @endif
    </form>
</div>

 

　

6.建立中间件，并配置中间件

 

 

 

Route::group(['prefix' =>'admin','middleware'=>['adminauth']],function(){
    Route::get('shop/list','ShopController@index');
});


Route::get('admins/login','AdminsController@login');
Route::post('admins/dologin','AdminsController@dologin');

 

 

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class AdminAuth
{
    /**
     * Handle an incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure $next
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        //如果没有指定的话，默认 guard 是 web，
        //dump(Auth::guard($guard)->check()); 判断用户是否认证
        //Auth::guard($guard)->user() 获取用户信息
        //Auth::guard($guard)->guest() 是否是来宾
        if(Auth::guard($guard)->guest()){
            if($request->ajax() || $request->wantsJson()){
                return response('Unauthorized.', 401);
            }else{
                return redirect()->guest('admins/login');
            }
        }

        return $next($request);
    }
}

7.如果你在登录页面使用了验证码的话，可以借助独立验证器进行验证

<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class UserRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     *
     * @return bool
     */
    public function authorize()
    {
        return true;
    }

    /**
     * Get the validation rules that apply to the request.
     *
     * @return array
     */
    public function rules()
    {
        return [
            //
            'username' => 'required|max:30|min:6',
            'password' => 'required|min:6',
            'code' => 'required|captcha'
        ];
    }
    public function messages()
    {
        return [
            'username.required' => '账号不能为空',
            'username.max' => '账号过长',
            'username.min' => '账号格式不正确',
            'password.required' =>'密码不能为空',
            'password.min' => '密码过于简单',
            'code.required' =>'验证码不能为空',
            'code.captcha' => '验证码错误'
        ];
    }
}

　8.登录页面展示

 

 

 

标签：Laravel,users,admins,Auth,认证,guard,user,----------------------------------------
来源： https://www.cnblogs.com/superzwb/p/15344633.html

本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享；
2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关；
3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关；
4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除；
5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。