使用中间件在 laravel 中进行用户身份验证

Posted 2023-03-14

【中文标题】使用中间件在 laravel 中进行用户身份验证

【英文标题】：User authentication in laravel using middleware

【发布时间】：2018-07-01 02:41:23

【问题描述】：

我对 laravel 中内置的用户身份验证功能有疑问。我得到了身份验证部分，但似乎用户没有存储在会话中。 管理员控制代码：

<?php
namespace App\Http\Controllers\Admin;
use Illuminate\Http\Request;

use App\Http\Requests;
use App\Http\Controllers\Controller;
use Validator, Input, Redirect; 
use DB;
use Session;

class AdminController extends Controller

    public function index(Request $request)
    
        if(isset($_POST['submit']))
                    $v = Validator::make($request->all(), [
                    'email' => 'required',
                    'password' => 'required',
                    ],
                    [
                        'required' => 'This field is required.'
                    ]);

                    if ($v->fails())
                    
                        $messages = $v->messages();
                        return redirect()->back()->withErrors($v)->withInput();
                    
                   else
                   

                        $email = $request->input('email');
                        $pass = $request->input('password');
                        $whereData = [
                                ['email',$email],
                                ['password',md5($pass)]
                            ];

                       $res = DB::table('tbl_admin_users')->where($whereData)->get();
                        if(!empty($res))
                            $userid=$res[0]->id;
                            $fname=$res[0]->fname;
                            Session::put('userid', $userid);
                            Session::put('fname', $fname);
                            return Redirect('admin/dashboard-listing');
                    
                        else
                        
                            Session::flash('message', 'Email/Password is invalid!'); 
                            Session::flash('alert-class', 'alert-danger');
                            return Redirect('admin/login');
                        
                    
          
          else
            return view('admin.admin-login');
            


    


 public function logout()
 
    Session::flush();
    return Redirect('admin/login');
 

中间件Authentication.php代码：

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class Authenticate

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    
        if (Auth::guard($guard)->guest()) 
            if ($request->ajax() || $request->wantsJson()) 
                return response('Unauthorized.', 401);
             else 
                return redirect()->guest('login');
            
        

        return $next($request);
    

AuthController 我有：

<?php

namespace App\Http\Controllers\Auth;

use App\User;
use Validator;
use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\ThrottlesLogins;
use Illuminate\Foundation\Auth\AuthenticatesAndRegistersUsers;

class AuthController extends Controller

    /*
    |--------------------------------------------------------------------------
    | Registration & Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles the registration of new users, as well as the
    | authentication of existing users. By default, this controller uses
    | a simple trait to add these behaviors. Why don't you explore it?
    |
    */

    use AuthenticatesAndRegistersUsers, ThrottlesLogins;

    /**
     * Where to redirect users after login / registration.
     *
     * @var string
     */
    protected $redirectTo = '/';

    /**
     * Create a new authentication controller instance.
     *
     * @return void
     */
    public function __construct()
    
        $this->middleware($this->guestMiddleware(), ['except' => 'logout']);
    

    /**
     * Get a validator for an incoming registration request.
     *
     * @param  array  $data
     * @return \Illuminate\Contracts\Validation\Validator
     */
    protected function validator(array $data)
    
        return Validator::make($data, [
            'name' => 'required|max:255',
            'email' => 'required|email|max:255|unique:users',
            'password' => 'required|min:6|confirmed',
        ]);
    

    /**
     * Create a new user instance after a valid registration.
     *
     * @param  array  $data
     * @return User
     */
    protected function create(array $data)
    
        return User::create([
            'name' => $data['name'],
            'email' => $data['email'],
            'password' => bcrypt($data['password']),
        ]);
    

正确的详细信息和登录页面路由后的路由：

Route::get('/admin/dashboard-listing',array('uses'=>'Admin\AdminDashboardController@index'));

注销后重定向路由：

Route::get('/admin/login',array('uses'=>'Admin\AdminController@index'));

我的问题是如何在这段代码中使用中间件。因为 注销后我可以轻松访问 url .back 按钮也可以工作 我希望通过中间件进行 laravel 用户身份验证..

【问题讨论】：

张贴你所有的路线文件。

已经发布了登录和注销后的路由，没有其他路由 m 使用代替这个...

不，我实际上没有，我是 laravel 的新手，这就是为什么我需要知道这一切......

如果你想在注销后加载到 url，你现在用返回按钮访问 url 会发生什么？？

当前使用注销功能 m 正在重定向到登录页面，但在这种情况下会话销毁但后退按钮浏览器将我带到登录状态

【参考方案1】：

你需要manually login user 和auth()->login():

$res = DB::table('tbl_admin_users')->where($whereData)->first();
if(!empty($res)) 
    $userid = $res[0]->id;
    $fname = $res[0]->fname;
    Session::put('userid', $userid);
    Session::put('fname', $fname);
    auth()->login($res);
    return Redirect('admin/dashboard-listing');

或者，您可以使用auth()->loginById($res->id) 方法。