Laravel 8：身份验证始终重定向回登录

Question

I recently shifted a 6-year-old Laravel project from 5.1 to 8.x. I've followed Upgrading old Laravel applications and now that I'm running Laravel 8, I can't log into the application anymore. I've rewritten the authentication to match the Laravel Breeze starter kit, but my problem remains: After entering the user credentials, I'm always being redirected to the login page.

I double checked if the user really is authenticated by entering wrong user credentials. When doing that, I correctly get an error message. I don't get an error message when entering the right user credentials.

Everything but the login page is only accessible for authenticated users, so these are the relevant portions of my setup:

// /routes/web.php

Route::get('/', function () {
    return redirect('login');
});

Route::get('/edit-data', function () {
    return view('dashboard.edit_data');
})->middleware(['auth'])->name('edit-data');

require __DIR__.'/auth.php';

// /routes/auth.php

Route::get('/login', [AuthenticatedSessionController::class, 'create'])
    ->middleware('guest')
    ->name('login');

Route::post('/login', [AuthenticatedSessionController::class, 'store'])
    ->middleware('guest');

Route::post('/logout', [AuthenticatedSessionController::class, 'destroy'])
    ->middleware('auth')
    ->name('logout');

// /app/Http/Controllers/Auth/AuthenticatedSessionController.php

public function create()
{
    if (Auth::check() || Auth::viaRemember()) {
        return redirect('edit-data');
    } else {
        return view('user.login');
    }
}

public function store(LoginRequest $request)
{
    $request->authenticate();

    $request->session()->regenerate();

    Session::put('language', LanguageInterface::DE);

    return redirect()->intended(RouteServiceProvider::HOME);
}

public function destroy(Request $request)
{
    Auth::guard('web')->logout();

    $request->session()->invalidate();

    $request->session()->regenerateToken();

    return redirect('login');
}

// /app/Http/Requests/Auth/LoginRequest.php

public function authenticate()
{
    $this->ensureIsNotRateLimited();

    if (!Auth::attempt($this->only('login', 'password'), true)) {
        RateLimiter::hit($this->throttleKey());

        throw ValidationException::withMessages([
            'login' => __('auth.failed'),
        ]);
    }

    RateLimiter::clear($this->throttleKey());
}

// /app/Http/Middleware/RedirectIfAuthenticated.php

public function handle(Request $request, Closure $next, ...$guards)
{
    $guards = empty($guards) ? [null] : $guards;

    foreach ($guards as $guard) {
        if (Auth::guard($guard)->check()) {
            return redirect(RouteServiceProvider::HOME);
        }
    }

    return $next($request);
}

// /app/Providers/RouteServiceProvider.php

public const HOME = '/edit-data';

I also debugged the authentication process with Xdebug and noticed that the path is correctly set to /edit-data . But the outcome is always a refresh of (or redirection to) the login page.

Am I missing something?

Answer 1

After a bit of research, I found the solution: The password hashes didn't match anymore. Luckily I had stored the users' credentials and was able to rehash the passwords using php artisan tinker :

echo Hash::make('password');