Laravel 多重保护验证失败

Laravel Multiple Guard Authentication Failure

我正在创建一个 Laravel 有多个守卫的网站。 我的目标 是能够使用 session 和 [=58] 作为 Admin、Employee 和 User 登录=]User-API 使用护照。 一切 工作正常。 但是, 我无法以 Employee.

身份登录

这是 git 存储库。请检查员工分支和数据库种子。 Git Repo

我把步骤和代码分享到这里,找出问题所在:

  1. 我创建了必要的保护程序、提供程序和密码代理程序
  2. 我更新了员工模型
  3. 我更新了 RedirectIfAuthenticated 和 Authenticate 中间件
  4. 我创建了必要的路由和控制器

以下是全部代码:

这是 config/auth.php 文件,我有 4 个守卫 web、api、admin 和员工 及其 提供商和密码经纪人:

<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Authentication Defaults
    |--------------------------------------------------------------------------
    |
    | This option controls the default authentication "guard" and password
    | reset options for your application. You may change these defaults
    | as required, but they're a perfect start for most applications.
    |
    */

    'defaults' => [
        'guard' => 'web',
        'passwords' => 'users',
    ],

    /*
    |--------------------------------------------------------------------------
    | Authentication Guards
    |--------------------------------------------------------------------------
    |
    | Next, you may define every authentication guard for your application.
    | Of course, a great default configuration has been defined for you
    | here which uses session storage and the Eloquent user provider.
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | Supported: "session", "token"
    |
    */

    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'passport',
            'provider' => 'users',
            'hash' => false,
        ],

        'admin' => [
            'driver' => 'session',
            'provider' => 'admins',
        ],

        'employee' => [
            'driver' => 'session',
            'provider' => 'employees',
        ],

    ],

    /*
    |--------------------------------------------------------------------------
    | User Providers
    |--------------------------------------------------------------------------
    |
    | All authentication drivers have a user provider. This defines how the
    | users are actually retrieved out of your database or other storage
    | mechanisms used by this application to persist your user's data.
    |
    | If you have multiple user tables or models you may configure multiple
    | sources which represent each model / table. These sources may then
    | be assigned to any extra authentication guards you have defined.
    |
    | Supported: "database", "eloquent"
    |
    */

    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\User::class,
        ],

        'admins' => [
            'driver' => 'eloquent',
            'model' => App\Admin::class,
        ],

        'employees' => [
            'driver' => 'eloquent',
            'model' => App\Employee::class,
        ],

        // 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Resetting Passwords
    |--------------------------------------------------------------------------
    |
    | You may specify multiple password reset configurations if you have more
    | than one user table or model in the application and you want to have
    | separate password reset settings based on the specific user types.
    |
    | The expire time is the number of minutes that the reset token should be
    | considered valid. This security feature keeps tokens short-lived so
    | they have less time to be guessed. You may change this as needed.
    |
    */

    'passwords' => [
        'users' => [
            'provider' => 'users',
            'table' => 'password_resets',
            'expire' => 60,
            'throttle' => 60,
        ],

        'admins' => [
            'provider' => 'admins',
            'table' => 'password_resets',
            'expire' => 15,
            'throttle' => 60,
        ],

        'employees' => [
            'provider' => 'employees',
            'table' => 'password_resets',
            'expire' => 60,
            'throttle' => 60,
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Password Confirmation Timeout
    |--------------------------------------------------------------------------
    |
    | Here you may define the amount of seconds before a password confirmation
    | times out and the user is prompted to re-enter their password via the
    | confirmation screen. By default, the timeout lasts for three hours.
    |
    */

    'password_timeout' => 10800,

];

这里是Employee.php型号:

<?php

namespace App;

use App\Traits\Permissions\HasPermissionsTrait;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use App\Notifications\Employee\ResetPasswordNotification as EmployeeResetPasswordNotification;

class Employee extends Authenticatable
{
    use Notifiable, HasPermissionsTrait;

    protected $guard = 'employee';

    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'name', 'email', 'password',
    ];

    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password', 'remember_token',
    ];

    /**
     * The attributes that should be cast to native types.
     *
     * @var array
     */
    protected $casts = [
        'email_verified_at' => 'datetime',
    ];

    /**
     * Send the password reset notification.
     *
     * @param  string  $token
     * @return void
     */
    public function sendPasswordResetNotification($token)
    {
        $this->notify(new EmployeeResetPasswordNotification($token));
    }
}

这是RedirectIfAuthenticated.phpclass中的App\Http\Middleware:

<?php

namespace App\Http\Middleware;

use App\Providers\RouteServiceProvider;
use Closure;
use Illuminate\Support\Facades\Auth;

class RedirectIfAuthenticated
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if ($guard == "admin" && Auth::guard($guard)->check()) {
            return redirect(RouteServiceProvider::ADMINHOME);
        }

        if ($guard == "employee" && Auth::guard($guard)->check()) {
            return redirect(RouteServiceProvider::EMPLOYEEHOME);
        }

        if (Auth::guard($guard)->check()) {
            return redirect('/home');
        }

        return $next($request);
    }
}

这里是Authenticate.phpclass在App\Http\Middleware:

<?php

namespace App\Http\Middleware;

use Illuminate\Auth\Middleware\Authenticate as Middleware;

class Authenticate extends Middleware
{
    /**
     * Get the path the user should be redirected to when they are not authenticated.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return string|null
     */
    protected function redirectTo($request)
    {
        if ($request->expectsJson()) {
            return response()->json(['error' => 'Unauthenticated.'], 401);
        }

        if ($request->is('admin') || $request->is('admin/*')) {
            return route('admin.login');
        }

        if ($request->is('employee') || $request->is('employee/*')) {
            return route('employee.login');
        }

        if (! $request->expectsJson()) {
            return route('login');
        }
    }
}

这里是员工路线:

Route::prefix('employee')->group(function() {
    Route::get('/', 'Employee\HomeController@index')->name('employee.dashboard');
    Route::get('/home', 'Employee\HomeController@index')->name('employee.home');

    // Login Logout Routes
    Route::get('/login', 'Auth\Employee\LoginController@showLoginForm')->name('employee.login');
    Route::post('/login', 'Auth\Employee\LoginController@login')->name('employee.login.submit');
    Route::post('/logout', 'Auth\Employee\LoginController@logout')->name('employee.logout');

    // Password Resets Routes
    Route::post('password/email', 'Auth\Employee\ForgotPasswordController@sendResetLinkEmail')->name('employee.password.email');
    Route::get('password/reset', 'Auth\Employee\ForgotPasswordController@showLinkRequestForm')->name('employee.password.request');
    Route::post('password/reset', 'Auth\Employee\ResetPasswordController@reset')->name('employee.password.update');
    Route::get('/password/reset/{token}', 'Auth\Employee\ResetPasswordController@showResetForm')->name('employee.password.reset');
});

最后是 App\Http\Controllers\Auth\Employee\LoginController.php:

<?php

namespace App\Http\Controllers\Auth\Employee;

use App\Http\Controllers\Controller;
use App\Providers\RouteServiceProvider;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Support\Facades\Auth;
use Illuminate\Http\Request;

class LoginController extends Controller
{
    /*
    |--------------------------------------------------------------------------
    | Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles authenticating employees for the application and
    | redirecting them to your home screen. The controller uses a trait
    | to conveniently provide its functionality to your applications.
    |
    */

    /**
     * Where to redirect users after login.
     *
     * @var string
     */
    protected $redirectTo = RouteServiceProvider::EMPLOYEEHOME;

    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('guest:employee')->except('logout');
    }

    /**
     * Get the guard to be used during authentication.
     *
     * @return \Illuminate\Contracts\Auth\StatefulGuard
     */
    protected function guard()
    {
        return Auth::guard('employee');
    }

    public function showLoginForm()
    {
        return view('auth.employee-login');
    }

    /**
     * Handle a login request to the application.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\RedirectResponse|\Illuminate\Http\Response|\Illuminate\Http\JsonResponse
     *
     */
    public function login(Request $request)
    {
        $this->validate($request, [
            'email'   => 'required|email',
            'password' => 'required|min:6'
        ]);

        $credentials = ['email' => $request->email, 'password' => $request->password];
        $remember_token = $request->get('remember');

        if ($res = $this->guard()->attempt($credentials, $remember_token)) {
                return redirect()->intended('/employee/home');
        }

        return back()->withInput($request->only('email', 'remember'));
    }

    public function logout()
    {
        Auth::guard('employee')->logout();
        return redirect('/');
    }
}

问题是:

login 函数中,attempt 函数返回 true 但重定向返回登录页面,这意味着Employee/HomeController.php 在其构造函数中具有中间件 auth:employee 将我踢出 并将我返回 Authenticate 中间件,然后 returns 我到员工登录页面。

我检查过:

if ($res = $this->guard()->attempt($credentials, $remember_token)) {
    return redirect()->intended('/employee/home');
}

在 LoginController 的这个 if 语句中如下:

-- dd(Auth::guard('employee')->check());它返回真值。

-- dd(Auth::guard('employee')->user()); 它返回:

App\Employee {#379 ▼
  #guard: "employee"
  #fillable: array:3 [▶]
  #hidden: array:2 [▶]
  #casts: array:1 [▶]
  #connection: "mysql"
  #table: "employees"
  #primaryKey: "id"
  #keyType: "int"
  +incrementing: true
  #with: []
  #withCount: []
  #perPage: 15
  +exists: true
  +wasRecentlyCreated: false
  #attributes: array:7 [▶]
  #original: array:7 [▼
    "name" => "employee"
    "email" => "employee@gmail.com"
    "email_verified_at" => "2020-05-05 18:16:25"
    "password" => "yzFxGvAA2GVRkcAYFEXc.3WyOtcdlARlOMwIdSEqbU2.95NNWUJG"
    "remember_token" => null
    "created_at" => "2020-05-05 18:16:25"
    "updated_at" => "2020-05-05 18:16:25"
  ]
  #changes: []
  #classCastCache: []
  #dates: []
  #dateFormat: null
  #appends: []
  #dispatchesEvents: []
  #observables: []
  #relations: []
  #touches: []
  +timestamps: true
  #visible: []
  #guarded: array:1 [▶]
  #rememberTokenName: "remember_token"

我还是找不到问题出在哪里..任何帮助。谢谢。

问题不在登录控制器或问题中的逻辑中。一切都很好。然而,员工迁移是错误的,它在 table 中没有 id,这就是解决方法。所以这个问题是无关紧要的。