vip*_*maa 2 php authentication laravel laravel-5
我使用以下代码为管理员角色创建中间件:
php artisan make:middleware AdminMiddleware
Run Code Online (Sandbox Code Playgroud)
之后,我为登录页面创建了一条路线:
Route::get('admin/login', ['middleware'=>'web','as'=>'admin.login','uses'=>'AdminController@loginView']);
Route::post('admin/login',['middleware'=>'web','as'=>'admin.login','uses'=>'AdminController@login']);
Route::group(['prefix'=>'admin','middleware' => ['auth.admin','web']], function()
{
Route::get('/', ['as'=>'admin.home','uses'=>'AdminController@index']);
Route::get('/home', ['as'=>'admin.home','uses'=>'AdminController@index']);
});
Run Code Online (Sandbox Code Playgroud)
控制器是
class AdminController extends Controller
{
//
function index(){
return 'welcome';
}
function loginView(){
return view('admin.login');
}
function login(Request $request){
$error = $this->validate($request, [
'email' => 'required|email',
'password' => 'required|min:5',
]);
$email = $request->input('email');
$password = $request->input('password');
$remember = $request->input('remember');
if (Auth::attempt(['email' => $email, 'password' => $password,'type'=>'admin'], $remember)) {
// Authentication passed...
Auth::login(Auth::user(), $remember);
return redirect()->route('admin.home');
}
else{//('message', 'Login Failed')
return redirect()->route('admin.login')->withErrors($request->all(), "message")->withInput();
}
}
}
Run Code Online (Sandbox Code Playgroud)
在AdminMiddleware中
public function handle($request, Closure $next)
{
var_dump(Auth::user());
if(!Auth::check()){
return redirect()->route('admin.login')->withErrors('You are not logged in');
}
elseif ($request->user()->type != 'admin'){
dd($request->user());
return redirect()->route('admin.login')->withErrors('You have not authority');
}
return $next($request);
}
Run Code Online (Sandbox Code Playgroud)
错误是:我总是在AdminMiddleware中为每个$ request-> user()或Auth:user获取null.
您正以错误的顺序将中间件传递给路由组.
现在您有了这个订单['auth.admin', 'web'],这意味着auth.admin中间件将在web组中间件之前执行,并且由于web包含StartSession中间件,因此您将不需要任何会话auth.admin来获取经过身份验证的用户.
所以只需像这样切换中间件顺序:
Route::group(['prefix'=>'admin','middleware' => ['web', 'auth.admin']], function () {
// now the session is set up in `web` and then you have it in `auth.admin`
});
Run Code Online (Sandbox Code Playgroud)