Redirect unauthenticated users

When the auth middleware detects an unauthenticated user, it will redirect the user to a directory named login on named routes.
You can modify this behavior by modifying the redirectTo function in the app/Http/Middleware/Authenticate.php file:

/**
 * Get the path the user should be redirected to.
 *
 * @param  \Illuminate\Http\Request  $request
 * @return string
 */
 protected function redirectTo($request){ 
    return route('login');
 }

Specify the watcher

When you add the auth middleware to the route, you can also specify which watcher to use for user authentication. The specified guard should correspond to a key in the guards array in the auth.php configuration file:

public function __construct(){ 
   $this->middleware('auth:api');
}

Login Throttling

If you use Laravel's built-in LoginController class, the Illuminate\Foundation\Auth\ThrottlesLogins trait is already included in the control The device was hit. By default, if a user fails to provide correct login credentials after multiple attempts, the user will not be able to try to log in again for one minute. This throttling policy is based on the uniqueness of a user's username/email address and their IP address.

Manually authenticating users

It is not necessary to use an authentication controller in Lavarel. If you choose to remove these controllers, you will need to use the Lavarel validation classes directly. Don't worry, it's easy!

You can access the Laravel service with the help of the Auth facade, so you need to import Auth at the beginning of the class. Let's take a look at the attempt method:

<?php
    namespace App\Http\Controllers;
    use Illuminate\Http\Request;
    use Illuminate\Support\Facades\Auth;
    class LoginController extends Controller{  
     /**
     * 处理身份验证尝试。
     *
     * @param  \Illuminate\Http\Request $request
     *
     * @return Response
     */   
    public function authenticate(Request $request)   
     {       
        $credentials = $request->only('email', 'password');      
        if (Auth::attempt($credentials)) {        
            // 身份验证通过...           
           return redirect()->intended('dashboard');    
             }   
           }
        }

attempt Each parameter of the method is an associative array. The array value is used to find the user in the database. In the above example, the user will be found by the value of the email column. If the user is found, the hashed password stored in the database is compared to the password value in the array. There is no need to hash password, the framework automatically hashes this value before comparing it to the hashed password in the database. If the two hashes match, an authenticated session will be established for the user.

If the verification is successful, the attempt method returns true, otherwise it returns false.

The intended method in redirection will redirect the user to the URL intercepted before authentication via the authentication middleware. If the expected target does not exist, you can specify a fallback URI for this method.

Specify additional conditions

In addition to the user's email and password, you can add additional conditions to the authentication query. For example, we can verify that the user has been marked as "activated":

if (Auth::attempt(['email' => $email, 'password' => $password, 'active' => 1])) {  
  // 用户存在，已激活且未被禁用。
 }

{note} In these examples, email is not a required option, it is only used Demonstrate. You should use column names that correspond to "username" in your database.

Access the specified guard instance

You can use the Auth facade's guard method to specify the guard instance you want to use. This allows you to use completely independent verifiable models or user tables to manage validation for various parts of your application.

The guard name passed to the guard method needs to match one of the configuration items in the auth.php configuration:

if (Auth::guard('admin')->attempt($credentials)) { 
   //
 }

Logout

Users need to log out using the logout method of the Auth facade. It will clear the user authentication information in the user session:

Auth::logout();

Remember the user

If you want To provide "remember me" functionality in your application, you can pass a boolean value to the attempt method as its second parameter, which will keep the user authenticated indefinitely until the user manually logs out. The user table needs to contain a remember_token column of string type for storing tokens.

if (Auth::attempt(['email' => $email, 'password' => $password], $remember)) { 
   // 用户被记住...
}

{tip} If you use Laravel's built-in LoginController, the correct logic to "remember" the user is already implemented by the traits used by the controller.

If "Remember User" is enabled, you can use the viaRemember method to determine whether the "Remember Me" cookie is used to authenticate the user:

if (Auth::viaRemember()) { 
   //
}

Other authentication methods

Verify user instance

If you want to replace an existing To log in to the application, the user can call the login method with the user instance as its parameter. The object must implement the Illuminate\Contracts\Auth\Authenticatable contract. The App\User model that comes with Laravel has implemented this interface:

Auth::login($user);
// 登录并「记住」给定的用户...
Auth::login($user, true);

Use the following method to specify the desired guard instance:

Auth::guard('admin')->login($user);

Verify user identity by ID

You can use the loginUsingId method to log in the user to the application by ID. This method accepts the primary key of the user whose identity you wish to authenticate:

Auth::loginUsingId(1);
// 登录并「记住」给定用户...
Auth::loginUsingId(1, true);

Authenticate the user's identity only once

You can use the once method to authenticate the user in a single request The user logs into the application. Doing so will not use sessions or cookies, which means this method helps build a stateless API:

if (Auth::once($credentials)) {
    //
  }

HTTP Basic Authentication

HTTP Basic Authentication Provides a quick way to authenticate users in your application without setting up a dedicated "login" page. Before you begin, attach the auth.basic middleware to your route. auth.basic The middleware is already included in the Laravel framework, so you don't need to define it:

Route::get('profile', function () { 
   // 只有认证过的用户可以进入...
 })->middleware('auth.basic');

After attaching the middleware to a route, it will automatically You are prompted for credentials. By default, the auth.basic middleware uses the email field on the user record as the "username".

FastCGI Notes

If you are using PHP FastCGI mode, HTTP basic authentication may not work properly. You need to add the following lines to your .htaccess file:

RewriteCond %{HTTP:Authorization} ^(.+)$
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

onceBasic method. If the onceBasic method does not return any response, the request can be passed further into the application:

<?php
  namespace App\Http\Middleware;
  use Illuminate\Support\Facades\Auth;
  class AuthenticateOnceWithBasicAuth{   
       /**
     * 处理传入的请求
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */  
  public function handle($request, $next)  
    {       
       return Auth::onceBasic() ?: $next($request);  
     }
   }

Route::get('api/user', function () {  
  // 只有认证过的用户可以进入...
})->middleware('auth.basic.once');

Auth facade logout method. This will clear the authentication information in the user's session:

use Illuminate\Support\Facades\Auth;Auth::logout();

Illuminate\Session\Middleware\AuthenticateSession middleware is in the web middleware group in your app/Http/Kernel.php class , and is not commented out:

'web' => [   
    // ...
    \Illuminate\Session\Middleware\AuthenticateSession::class,  
    // ...
  ],

logoutOtherDevices method on the Auth facade. This method requires the user to provide their current password, which your application should accept through the input form:

use Illuminate\Support\Facades\Auth;
Auth::logoutOtherDevices($password);

{note} When the

logoutOtherDevices method is called, the user's other Session will be completely disabled, meaning they will "exit" all of the watchers they were previously authenticated to.

<?php
  namespace App\Providers;
  use App\Services\Auth\JwtGuard;
  use Illuminate\Support\Facades\Auth;
  use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
  class AuthServiceProvider extends ServiceProvider{   
      /**
     * 注册任意应用认证／授权服务。
     *
     * @return void
     */   
  public function boot()  
   {      
     $this->registerPolicies();        
     Auth::extend('jwt', function ($app, $name, array $config) {         
       // 返回一个 Illuminate\Contracts\Auth\Guard 实例...           
        return new JwtGuard(Auth::createUserProvider($config['provider']));     
         });   
    }}

'guards' => [  
  'api' => [     
     'driver' => 'jwt',        
     'provider' => 'users',    
     ],
  ],

use App\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
  /**
 * 注册任意应用认证／授权服务。
 *
 * @return void
 */
 public function boot(){  
   $this->registerPolicies();  
    Auth::viaRequest('custom-token', function ($request) {     
       return User::where('token', $request->token)->first();  
       });
     }

'guards' => [   
 'api' => [      
   'driver' => 'custom-token',  
   ],
 ],

<?php
    namespace App\Providers;
    use Illuminate\Support\Facades\Auth;
    use App\Extensions\RiakUserProvider;
    use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
    class AuthServiceProvider extends ServiceProvider{   
        /**
     * 注册任意应用身份验证 / 授权服务Register any application authentication / authorization services.
     *
     * @return void
     */   
      public function boot()   
       {      
         $this->registerPolicies();       
         Auth::provider('riak', function ($app, array $config) {         
            // 返回 Illuminate\Contracts\Auth\UserProvider 实例...            
            return new RiakUserProvider($app->make('riak.connection'));       
           });   
        }}

'providers' => [  
  'users' => [      
    'driver' => 'riak',  
      ],
  ],

'guards' => [   
    'web' => [     
       'driver' => 'session',        
       'provider' => 'users',    
     ],
  ],

<?php
    namespace Illuminate\Contracts\Auth;
    interface UserProvider {  
      public function retrieveById($identifier);    
      public function retrieveByToken($identifier, $token);    
      public function updateRememberToken(Authenticatable $user, $token);    
      public function retrieveByCredentials(array $credentials);    
      public function validateCredentials(Authenticatable $user, array $credentials);
     }

<?php
   namespace Illuminate\Contracts\Auth;
   interface Authenticatable {   
      public function getAuthIdentifierName();    
      public function getAuthIdentifier();    
      public function getAuthPassword();    
      public function getRememberToken();    
      public function setRememberToken($value);    
      public function getRememberTokenName();
     }

/**
 * 应用的事件监听器映射。
 *
 * @var array
 */
 protected $listen = [   
    'Illuminate\Auth\Events\Registered' => [     
       'App\Listeners\LogRegisteredUser',  
       ],  
     'Illuminate\Auth\Events\Attempting' => [     
        'App\Listeners\LogAuthenticationAttempt', 
         ],  
      'Illuminate\Auth\Events\Authenticated' => [    
         'App\Listeners\LogAuthenticated',   
        ],  
      'Illuminate\Auth\Events\Login' => [     
         'App\Listeners\LogSuccessfulLogin',   
        ],  
      'Illuminate\Auth\Events\Failed' => [     
         'App\Listeners\LogFailedLogin',   
        ], 
      'Illuminate\Auth\Events\Logout' => [      
           'App\Listeners\LogSuccessfulLogout',  
           ],   
       'Illuminate\Auth\Events\Lockout' => [     
         'App\Listeners\LogLockout',   
         ],  
       'Illuminate\Auth\Events\PasswordReset' => [     
         'App\Listeners\LogPasswordReset',   
         ],
      ];