如何使用 laravel 6 在我的包中使用 auth 进行自定义防护？

Question

I am trying to make auth through laravel package using admins table. In the project directory I added admin guard into config/auth.php

'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\User::class,
        ],

        'admins' => [
            'driver' => 'eloquent',
            'model' => App\Admin::class,
        ],

        // 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

And in the guard array

    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'token',
            'provider' => 'users',
            'hash' => false,
        ],

        'admin' => [
            'driver' => 'session',
            'provider' => 'admins',
        ],
    ],

Following is my login controller inside pacakge

class LoginController extends Controller
{

   use AuthenticatesUsers;
   protected $redirectTo = '/admin/dashboard';
   protected function redirectTo()
   {
         return '/admin/dashboard';
   }

   public function __construct()
   {
       $this->middleware('guest')->except('logout');
   }
   public function login(Request $request)
   {   
       if(Auth::guard('admin')->attempt($request->only('email','password'), true)){
           return redirect()
               ->intended(route('dashboard'))
               ->with('status','You are Logged in as Admin!');
       }
   }

}

and following is my dashboard controller

class DashboardController extends Controller
{
    public function __construct()
    {
        /* dd(Auth::check()); */ //return false : just want to show you

          $this->middleware('auth:admin');
    }

    public function index()
    {
        return view('xyz::dashboard');
    }

}

And in my Admin.php Model following script is there

namespace App;

class Admin extends \ABC\xyz\App\Models\Admin
{

}

Which is extending package model

namespace ABC\xyz\App\Models;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Foundation\Auth\User as Authenticatable;
class Admin extends Authenticatable
{

    protected $table = 'admins';
}

And below are the routes from my package

    $namespace = 'ABC\Xyz\App\Http\Controllers';
    Route::group([    
    'namespace' => $namespace,
    'middleware' => ['web'], 
    'prefix' => 'admin'
], function () {
    Route::get('login', function(){
        return view('xyz::auth.login');
    })->name('login');

    Route::post('/login', 'Auth\LoginController@login')->name('customLogin');
});

Route::group(['namespace' => $namespace,'prefix' => 'admin',  'middleware' => ['auth']  ], function () {
    Route::get('dashboard', 'DashboardController@index')->name('dashboard');
});

When I try to login, after submitting valid details it does not redirecting me to dashboard, nothing happening. Also when I try for open forcefully /dashboard it take me to login page.

Also right after login attempt when I try Auth::check() it's returns true but same thing returning false in dashboardController.php construct function. In the same way Auth::guard('admin')->user() returns user's info while on dashboardController.php it's returns null . I don't know what and where I am missing something.

I would like to request you kindly guide me about it. I would appreciate.

Thank you

Answer 1

When you define a route with a Prefix, the route name will be like prefix.name and the url will be like prefix/url . So here you can try this

Route::group([    
        'namespace' => $namespace,
        'middleware' => ['web'], 
        'prefix' => 'admin'
    ], function () {
        Route::get('login', function(){
            return view('xyz::auth.login');
        })->name('login');

        Route::post('login', 'Auth\LoginController@login')->name('tryForLogin');
});

Route::group(['namespace' => $namespace,'prefix' => 'admin','middleware' => 'auth'], function () {
    Route::get('dashboard', function(){
        return view('xyz::dashboard');
    })->name('dashboard');
});

All group was prefixed by "admin" , but there are some route or page that can be visited when its logged in.

Answer 2

The prefix are an option for defining a prefix the routes endpoint. You are looking for the as option.

// gives you routes:
// GET /admin/login named "admin.login" with middleware "web"
// POST /admin/login named "admin.tryForLogin" with middleware "web"
Route::group([    
        'namespace' => $namespace,
        'middleware' => ['web'], 
        'prefix' => 'admin',
        'as' => 'admin.'
    ], function () {
        Route::get('login', function() {
            return view('xyz::auth.login');
        })
        ->name('login');

        Route::post('login', 'Auth\LoginController@login')->name('tryForLogin');
    }
);

// gives you routes:
// GET /admin/dashboard named "admin.dashboard" with middleware "auth"
Route::middleware(['auth'])->group(function () {
    Route::get('/admin/dashboard', function(){
        return view('xyz::dashboard');
    })
    ->name('admin.dashboard');
});

Run php artisan optimize:clear after code changes.

Answer 3

The guest middleware ( \App\Http\Middleware\RedirectIfAuthenticated ) is responsible for redirecting authenticated users.

When using the middleware, you have to pass it the authentication guard to be used like this:

guest:guard

Example: in your LoginController constructor, use

$this->middleware('guest:admin')->except('logout');

instead of $this->middleware('guest')->except('logout');

Answer 4

use auth('admin')->user() in your dashboard controller. (returns authenticated admin)