版本说明：Laravel 5.3
已有用户的用户表(提前先创建好，生成好数据)
Auth 认证原理简述
Laravel 的认证是使用 guard 与 provider 配合完成， guard 负责认证的业务逻辑，认证信息的服务端保存等； provider 负责提供认证信息的持久化数据提供。
请求提交给 guard， guard 从 provider 里取出数据（类似用户名、密码等），验证输入数据与服务器端存储的数据是否吻合。如果提交的数据正确，再做 session 等业务的处理（如有需要）。
认证脚手架
首先我们导入 Laravel 的自带的认证脚手架
php artisan make:auth
执行数据库迁移（看需求吧有用户表的就不用生成数据表）：
php artisan migrate
修改 Auth 认证的配置文件config/auth.php
在 gurads 处，添加 admin guard 用于后台管理员认证，添加user guard用户普通用户认证
'guards' => [
'web' => [
'driver' => 'session',
'provider' => 'admins',
],
'admin' => [
'driver' => 'session',
'provider' => 'admins',
],
'user' => [
'driver' => 'session',
'provider' => 'users',
],
'api' => [
'driver' => 'token',
'provider' => 'users',
],
],
在 providers 处添加 admins provider，使用 Administrator 模型
在 providers 处添加 user provider，使用 UniUser 模型
'providers' => [
'users' => [
'driver' => 'eloquent',
'model' => \App\Models\UniUser::class,
],
'admins' => [
'driver' => 'eloquent',
'model' => \Encore\Admin\Auth\Database\Administrator::class,
],
],
生成对应的Moble
php artisan make:mode UniUser
php artisan make:mode Administrator
修改模型例如：
attributes['PassWord'];
}
//
protected $table = "uni_user";
protected $primaryKey = "ID";
public $timestamps =false;
}
创建用户界面
创建用户页面（0_0）懒的创建了因为，脚手架已经创建了登录、注册、找回的Controller了
修改 web.php的路由，注意middleware是和Auth.php中配置的对应
Route::get('/', 'SxolIndexController@index');
Route::group(['prefix' => 'user'], function () {
Route::group(['middleware' => 'auth.user'], function () {
Route::get('/', 'User\UserIndexController@index');
});
Route::get('login', 'User\LoginController@showLoginForm')->name('user.login');
Route::post('login', 'User\LoginController@login');
Route::post('logout', 'User\LoginController@logout');
Route::get('register','User\RegisterController@showRegistrationForm')->name('user.register');
Route::post('register','User\RegisterController@register');
});
编辑LoginController.php
namespace App\Http\Controllers\User;
use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Foundation\Auth\ThrottlesLogins;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Validator;
class LoginController extends Controller
{
use AuthenticatesUsers;
protected $maxLoginAttempts = 5; //每分钟最大尝试登录次数
protected $lockoutTime = 600; //登录锁定时间
/**
* Where to redirect users after login.
*
* @var string
*/
protected $redirectTo = '/user/';
/**
* 显示后台登录模板
*/
public function showLoginForm()
{
return view('user.login');
}
/**
* 使用 user guard
*/
protected function guard()
{
return auth()->guard('user');
}
protected function username()
{
return 'memname';
}
/**
* Create a new controller instance.
*
* @return void
*/
public function __construct()
{
$this->middleware('guest.user', ['except' => 'logout']);
}
/**
* @param Request $request
*/
protected function validateLogin(Request $request)
{
$this->validate($request,[
'memname' => 'required',
'password' => 'required',
], [
'memname.required' => '用户名必须',
'password.required' => '密码必须'
]);
}
/**
* 重写登录
* @param Request $request
* @return \Illuminate\Http\RedirectResponse|\Illuminate\Http\Response
*/
public function login(Request $request)
{
$this->validateLogin($request);
$throttles = $this->isUsingThrottlesLoginsTrait();
$lockedOut = $this->hasTooManyLoginAttempts($request);
if ($throttles && $lockedOut) {
$this->fireLockoutEvent($request);
return $this->sendLockoutResponse($request);
}
$credentials = $this->getCredentials($request);
if ($this->guard()->attempt($credentials, $request->has('remember'))) {
return $this->handleUserWasAuthenticated($request, $throttles);
}
if ($throttles && ! $lockedOut) {
$this->incrementLoginAttempts($request);
}
return $this->sendFailedLoginResponse($request);
}
protected function handleUserWasAuthenticated(Request $request, $throttles)
{
if ($throttles) {
$this->clearLoginAttempts($request);
}
// My Event Here
return redirect()->intended($this->redirectPath());
}
protected function getCredentials(Request $request)
{
return $request->only('memname', 'password');
}
/**
* Determine if the class is using the ThrottlesLogins trait.
*
* @return bool
*/
protected function isUsingThrottlesLoginsTrait()
{
return in_array(
ThrottlesLogins::class, class_uses_recursive(static::class)
);
}
public function logout(Request $request)
{
$this->guard()->logout();
$request->session()->forget($this->guard()->getName());
$request->session()->regenerate();
return redirect('/user');
}
}
编辑 login.blade.php
@extends('layouts.user')
@section('content')
登录
@endsection
后台管理认证中间件
php artisan make:middleware AuthUser
编辑 AuthUser
guard('user')->guest()) {
if ($request->ajax() || $request->wantsJson()) {
return response('Unauthorized.', 401);
} else {
return redirect()->guest('user/login');
}
}
return $next($request);
}
}
创建登录跳转中间件，用于有些操作在登录之后的跳转
php artisan make:middleware GuestUser
编辑GuestUser
guard('user')->check()) {
return redirect('/user');
}
return $next($request);
}
}
在 app/Http/Kernel.php 中注册以上中间件
'auth.user' => \App\Http\Middleware\AuthUser::class,
'guest.user' => \App\Http\Middleware\GuestUser::class,
感谢Laravel 5.3 不同用户表登录认证