Laravel 8：用数据库表检查用户数据不能正常工作

Question

I have created a two factor authentication system, and it redirects user to token.blade.php where he must enters the token that is going to be sent to his phone number and also stored at active_codes table.

Now I want to check if the user has entered the same token code that was stored at active_codes table which looks like this:

And then at the Controller, I tried this:

public function submit(Request $request)
    {
        $data = $request->validate([
            'token' => 'required|min:6'
        ]);

        if($data['token'] === auth()->user()->activeCode()->code){
            dd('same');
        }
    }

But when I enter the same token, I get this error:

ErrorException Undefined property: Illuminate\Database\Eloquent\Relations\HasMany::$code

so my question is how to check if the requested token code of user, is as same as the token code which is stored on the DB?

Note: The relationship between User and ActiveCode Models is OneToMany.

User.php :

public function activeCode()
    {
        return $this->hasMany(ActiveCode::class);
    }

ActiveCode.php :

public function user()
    {
        return $this->belongsTo(User::class);
    }

Answer 1

Now when you have the relationship between User Model and ActiveCode Model, you can add this to ActiveCode Model:

public function scopeVerifyCode($query, $code, $user)
{
   return !! $user->activeCode()->whereCode($code)->where('expired_at', '>', now())->first();
}

You can readmore about local and global scope here

But you need some session variables to check if user is not seeing token.blade.php without redirecting from login.blade.php . And also for sending user id to that route.

So at Auth\LoginController , add this:

protected function authenticated(Request $request, $user)
{
    if($user->two_factor_type !== 'off'){ // I assume you have this column at users table 
       auth()->logout(); // reject user from loggin in before submitting token 
       
       $request->session()->flash('auth', [
           'user_id' => $user->id,
           'remember' => $request->has('remember')
       ]);
    }
}

And then you can go to your Controller and write this:

public function submit(Request $request)
{
        $request->validate([
            'token' => 'required|min:6'
        ]);

        if($request->session()->has('auth')){
            return redirect(route('login'));
        }

        $user = User::findOrFail($request->session()->get('auth.user_id'));

        $status = ActiveCode::verifyCode($request->token,$user);

        if(!$status){
            return redirect(route('login'));
        }
        
        if(auth()->loginUsingId($user->id,$request->session()->get('auth.remember'))){
            return redirect('/'); // logs in user to homepage or any other route as you wish
        }
}

Answer 2

Your solution is pretty easy, you are not doing ->first() or ->get() , so you are trying to access a model property on a HasMany class.

This code should be similar to:

auth()->user()->activeCode()->first()->code

But if you have more than 1 code, then you should do something like:

public function submit(Request $request)
{
    $data = $request->validate([
        'token' => 'required|min:6'
    ]);

    if(auth()->user()->activeCode()->where('code', $data['token'])->exists()){
        dd('same');
    }
}