laravel框架学习之路（一）前后台用户认证分离

准备工作：
1、下载laravel框架
2、配置好项目（数据库连接以及虚拟主机）

开始：
前台用户认证laravel已经为我们写好了，此部分可参考官方文档

创建模型（以adminstrator为例）

php artisan make:model Models/Adminstrator -m 

编写administrator表迁移

Schema::create('administrators', function (Blueprint $table) {
    $table->engine = 'InnoDB';
    $table->increments('id');
    $table->string('login_name')->unique();
    $table->string('display_name')->nullable();
    $table->string('password');
    $table->string('avatar')->nullable();
    $table->rememberToken();
    $table->tinyInteger('status')->default(1);
    $table->timestamps();
});

编写administrator模型

<?php

namespace App\Models;

use Illuminate\Auth\Authenticatable;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Contracts\Auth\Authenticatable as AuthenticatableContract;

class Administrator extends Model implements AuthenticatableContract
{
    use Authenticatable;

    protected $fillable = [
        'login_name', 'password'
    ];

    protected $hidden = [
        'password', 'remember_token'
    ];
}

创建后台配置文件admin.php，在return数组中写入

'auth' => [
    'guards' => [
        'administrator' => [
            'driver'   => 'session',
            'provider' => 'administrators',
        ],
    ],

    'providers' => [
        'administrators' => [
            'driver' => 'eloquent',
            'model'  => \App\Models\Administrator::class,
        ],
    ],
],

创建后台用户认证中间件Authenticate，运行：

php artisan make:middleware Admin/Authenticate

修改handle方法：

<?php

/**
 * 用户认证中间件
 */

namespace App\Http\Middleware\Admin;

use Closure;
use Illuminate\Support\Facades\Auth;
    
class Authenticate
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (Auth::guard('administrator')->guest() && !$this->shouldPassThrough($request)) {
            return redirect()->guest(admin_base_path('login'));
        }
        return $next($request);
    }

    /**
     * Determine if the request has a URI that should pass through verification.
     *
     * @param \Illuminate\Http\Request $request
     *
     * @return bool
     */
    protected function shouldPassThrough($request)
    {
        $excepts = [
            admin_base_path('login'),
            admin_base_path('logout'),
        ];
        foreach ($excepts as $except) {
            if ($except !== '/') {
                $except = trim($except, '/');
            }
            if ($request->is($except)) {
                return true;
            }
        }
        return false;
    }
}

创建AdminServiceProvider，运行：

php artisan make:provider AdminServiceProvider

编写：

<?php

namespace App\Providers;

use Illuminate\Support\ServiceProvider;

class AdminServiceProvider extends ServiceProvider
{
    /**
     * 路由中间件
     * @var array
     */
    protected $routeMiddleware = [
        'admin.auth' => \App\Http\Middleware\Admin\Authenticate::class,
        'admin.pjax' => \Spatie\Pjax\Middleware\FilterIfPjax::class,
        'admin.log' => \App\Http\Middleware\Admin\LogOperation::class,
    ];

    /**
     * 中间件组
     * @var array
     */
    protected $middlewareGroups = [
        'admin' => [
            'admin.auth',
            'admin.pjax',
            'admin.log',
        ],
    ];

    /**
     * Bootstrap services.
     *
     * @return void
     */
    public function boot()
    {
        if (file_exists($routes = base_path('routes/admin.php'))) {
            $this->loadRoutesFrom($routes);
        }
    }

    /**
     * Register services.
     *
     * @return void
     */
    public function register()
    {
        $this->loadAdminAuthConfig();

        $this->registerRouteMiddleWare();
    }

    /**
     * 注册路由中间件
     */
    public function registerRouteMiddleWare()
    {
        // 注册路由中间件
        foreach ($this->routeMiddleware as $key => $middleware) {
            app('router')->aliasMiddleware($key, $middleware);
        }

        // 注册路由中间件组
        foreach ($this->middlewareGroups as $key => $middleware) {
            app('router')->middlewareGroup($key, $middleware);
        }
    }

    /**
     * Setup auth configuration.
     *
     * @return void
     */
    protected function loadAdminAuthConfig()
    {
        config(array_dot(config('admin.auth', []), 'auth.'));
    }
}

在config/app.php中注册provider和facades

'providers' => [
    ...,
    App\Providers\AdminServiceProvider::class,
]

'aliases' => [
    ...,
    'Admin' => App\Facades\Admin\Admin::class,
]

创建登录表单验证类，运行：

php artisan make:request AdministratorLoginRequest

重写其父类rules及messages方法：

<?php

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class AdministratorLoginRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     *
     * @return bool
     */
    public function authorize()
    {
        return true;
    }

    /**
     * Get the validation rules that apply to the request.
     *
     * @return array
     */
    public function rules()
    {
        return [
            'login_name' => 'required',
            'password' => ['required', 'min:6'] //密码必须，最小长度为6
        ];
    }

    public function messages()
    {
        return [
            'login_name.required' => '请输入用户名',
            'password.required' => '请输入密码',
            'password.min' => '密码至少6位',
        ];
    }
}

创建登录控制器，运行：

php artisan make:controller Admin/Auth/LoginController

编写登录方法：

<?php

namespace App\Http\Controllers\Admin\Auth;

use App\Http\Requests\AdministratorLoginRequest;
use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use Illuminate\Support\Facades\Auth;

class LoginController extends Controller
{
    /**
     * 登录表单
     * @return \Illuminate\Contracts\View\Factory|\Illuminate\View\View
     */
    public function getLoginForm()
    {
        if (!Auth::guard('administrator')->guest()) {
            return redirect(config('admin.route.prefix'));
        }

        return view(admin_view_base_path('auth.login.index'));
    }

    /**
     * 登录操作
     * @param AdministratorLoginRequest $loginRequest
     * @return \Illuminate\Http\RedirectResponse|\Illuminate\Routing\Redirector
     */
    public function postLogin(AdministratorLoginRequest $loginRequest)
    {
        $postData = $loginRequest->only('login_name', 'password', 'remember');

        $result = Auth::guard('administrator')->attempt($postData, $loginRequest->filled('remember'));

        if ($result) {
            admin_toast('登录成功');
            $loginRequest->session()->regenerate();
            return redirect()->intended(config('admin.route.prefix'));
        }else{
            return redirect()->back()->withInput()
                ->withErrors([
                    'login_name' => '用户名或密码错误'
                ]);
        }
    }

    /**
     * 注销登录
     * @return \Illuminate\Http\RedirectResponse|\Illuminate\Routing\Redirector
     */
    public function postLogout()
    {
        Auth::guard('administrator')->logout();

        session()->forget('url.intented');

        return redirect(config('admin.route.prefix'));
    }
}

至此，认证业务已经完成，接下来进行完善，使系统能够跑起来

创建视图文件（ps：1、控制器中使用的admin_view_base_path为自定义函数，指向后台视图文件主目录。2、视图采用AdminLTE框架）
login.blade:form

<form action="{{ admin_base_path('login') }}" method="post">
            @csrf

            <div class="form-group has-feedback">
                <input type="text" class="form-control {{ $errors->has('login_name') ? ' is-invalid' : '' }}"
                       placeholder="登 录 名" name="login_name" value="{{ old('login_name') }}" required autofocus>
                <span class="glyphicon glyphicon-envelope form-control-feedback"></span>

                @if ($errors->has('login_name'))
                <span class="invalid-feedback">
                    <strong class="text-danger">{{ $errors->first('login_name') }}</strong>
                </span>
                @endif
            </div>

            <div class="form-group has-feedback">
                <input type="password" class="form-control {{ $errors->has('password') ? ' is-invalid' : '' }}"
                       placeholder="密 码" name="password" required>
                <span class="glyphicon glyphicon-lock form-control-feedback"></span>

                @if ($errors->has('password'))
                    <span class="invalid-feedback">
                        <strong class="text-danger">{{ $errors->first('password') }}</strong>
                    </span>
                @endif
            </div>

            <div class="row">
                <div class="col-xs-8">
                    <div class="checkbox icheck">
                        <label>
                            <input type="checkbox" name="remember" {{ old('remember') ? 'checked' : '' }}> 记住我
                        </label>
                    </div>
                </div>

                <!-- /.col -->
                <div class="col-xs-4">
                    <button type="submit" class="btn btn-primary btn-block btn-flat">登 录</button>
                </div>
                <!-- /.col -->
            </div>
        </form>

创建后台home控制器，运行：

php artisan make:controller Admin/Home/HomeController

编写index方法返回视图

<?php

namespace App\Http\Controllers\Admin\Home;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;

class HomeController extends Controller
{
    //
    public function index()
    {
        return view(admin_view_base_path('home.index'));
    }

}

若仅作登录之后跳转测试，home视图中保留注销按钮即可，例：
home.blade

<div class="pull-right">
    <a class="btn btn-default btn-flat" href="/admin/logout"
       onclick="event.preventDefault();
                         document.getElementById('logout-form').submit();">
        {{ __('注 销') }}
    </a>
</div>

<form id="logout-form" class="hide" action="{{ admin_base_path('logout') }}" method="POST" style="display: none;">
    @csrf
</form>

编辑配置文件config.admin.php,加入以下配置：

'route' => [
    'prefix' => 'admin',

    'namespace' => 'App\\Http\\Controllers\\Admin',

    'middleware' => ['web', 'admin'],
],

编写路由文件routes/admin.php

<?php

use Illuminate\Routing\Router

Route::group([
    'prefix'        => config('admin.route.prefix'),
    'namespace'     => config('admin.route.namespace'),
    'middleware'    => config('admin.route.middleware'),
], function (Router $router) {
    $router->get('/', 'Home\HomeController@index');
    $router->get('login', 'Auth\LoginController@getLoginForm');
    $router->post('login', 'Auth\LoginController@postLogin');
    $router->post('logout', 'Auth\LoginController@postLogout');
});

数据表迁移与填充: 修改database/seeds/DatabaseSeeder

<?php

use Illuminate\Database\Seeder;

class DatabaseSeeder extends Seeder
{
    /**
     * Seed the application's database.
     *
     * @return void
     */
    public function run()
    {
        // $this->call(UsersTableSeeder::class);
        DB::table('administrators')->insert(
            [
                'login_name' => 'admin',
                'display_name' => '超级管理员',
                'password' => bcrypt('123456'),
                'created_at' => date('Y-m-d H:i:s', time()),
                'updated_at' => date('Y-m-d H:i:s', time()),
            ]
        );
    }
}

运行：

php artisan migrate //数据表迁移
php artisan db:seed //数据填充

如果前台使用了laravel框架用户认证的话，需要重写框架生成的LoginController的logout方法。防止前台用户注销的时候清除后台用户的session。（ps:框架自带用户认证在注销时会清空所有session）

/**
 * 重写前台注销操作
 * @param Request $request
 * @return \Illuminate\Http\RedirectResponse|\Illuminate\Routing\Redirector
 */
public function logout(Request $request)
{
    $this->guard()->logout();

    $request->session()->forget('uri.intented');

    return redirect('/');
}

至此，后台用户登录全部完成。enjoy it！