laravel框架学习之路（一）前后台用户认证分离

摘要：防止前台用户注销的时候清除后台用户的。框架自带用户认证在注销时会清空所有重写前台注销操作至此，后台用户登录全部完成。

准备工作：
1、下载laravel框架
2、配置好项目（数据库连接以及虚拟主机）

开始：
前台用户认证laravel已经为我们写好了，此部分可参考官方文档

创建模型（以adminstrator为例）

php artisan make:model Models/Adminstrator -m 

编写administrator表迁移

Schema::create("administrators", function (Blueprint $table) {
    $table->engine = "InnoDB";
    $table->increments("id");
    $table->string("login_name")->unique();
    $table->string("display_name")->nullable();
    $table->string("password");
    $table->string("avatar")->nullable();
    $table->rememberToken();
    $table->tinyInteger("status")->default(1);
    $table->timestamps();
});

编写administrator模型

创建后台配置文件admin.php，在return数组中写入
"auth" => [
    "guards" => [
        "administrator" => [
            "driver"   => "session",
            "provider" => "administrators",
        ],
    ],

    "providers" => [
        "administrators" => [
            "driver" => "eloquent",
            "model"  => AppModelsAdministrator::class,
        ],
    ],
],

创建后台用户认证中间件Authenticate，运行：
php artisan make:middleware Admin/Authenticate

修改handle方法：
guest() && !$this->shouldPassThrough($request)) {
            return redirect()->guest(admin_base_path("login"));
        }
        return $next($request);
    }

    /**
     * Determine if the request has a URI that should pass through verification.
     *
     * @param IlluminateHttpRequest $request
     *
     * @return bool
     */
    protected function shouldPassThrough($request)
    {
        $excepts = [
            admin_base_path("login"),
            admin_base_path("logout"),
        ];
        foreach ($excepts as $except) {
            if ($except !== "/") {
                $except = trim($except, "/");
            }
            if ($request->is($except)) {
                return true;
            }
        }
        return false;
    }
}

创建AdminServiceProvider，运行：
php artisan make:provider AdminServiceProvider

编写：
 AppHttpMiddlewareAdminAuthenticate::class,
        "admin.pjax" => SpatiePjaxMiddlewareFilterIfPjax::class,
        "admin.log" => AppHttpMiddlewareAdminLogOperation::class,
    ];

    /**
     * 中间件组
     * @var array
     */
    protected $middlewareGroups = [
        "admin" => [
            "admin.auth",
            "admin.pjax",
            "admin.log",
        ],
    ];

    /**
     * Bootstrap services.
     *
     * @return void
     */
    public function boot()
    {
        if (file_exists($routes = base_path("routes/admin.php"))) {
            $this->loadRoutesFrom($routes);
        }
    }

    /**
     * Register services.
     *
     * @return void
     */
    public function register()
    {
        $this->loadAdminAuthConfig();

        $this->registerRouteMiddleWare();
    }

    /**
     * 注册路由中间件
     */
    public function registerRouteMiddleWare()
    {
        // 注册路由中间件
        foreach ($this->routeMiddleware as $key => $middleware) {
            app("router")->aliasMiddleware($key, $middleware);
        }

        // 注册路由中间件组
        foreach ($this->middlewareGroups as $key => $middleware) {
            app("router")->middlewareGroup($key, $middleware);
        }
    }

    /**
     * Setup auth configuration.
     *
     * @return void
     */
    protected function loadAdminAuthConfig()
    {
        config(array_dot(config("admin.auth", []), "auth."));
    }
}

在config/app.php中注册provider和facades
"providers" => [
    ...,
    AppProvidersAdminServiceProvider::class,
]

"aliases" => [
    ...,
    "Admin" => AppFacadesAdminAdmin::class,
]

创建登录表单验证类，运行：
php artisan make:request AdministratorLoginRequest

重写其父类rules及messages方法：
 "required",
            "password" => ["required", "min:6"] //密码必须，最小长度为6
        ];
    }

    public function messages()
    {
        return [
            "login_name.required" => "请输入用户名",
            "password.required" => "请输入密码",
            "password.min" => "密码至少6位",
        ];
    }
}

创建登录控制器，运行：
php artisan make:controller Admin/Auth/LoginController

编写登录方法：
guest()) {
            return redirect(config("admin.route.prefix"));
        }

        return view(admin_view_base_path("auth.login.index"));
    }

    /**
     * 登录操作
     * @param AdministratorLoginRequest $loginRequest
     * @return IlluminateHttpRedirectResponse|IlluminateRoutingRedirector
     */
    public function postLogin(AdministratorLoginRequest $loginRequest)
    {
        $postData = $loginRequest->only("login_name", "password", "remember");

        $result = Auth::guard("administrator")->attempt($postData, $loginRequest->filled("remember"));

        if ($result) {
            admin_toast("登录成功");
            $loginRequest->session()->regenerate();
            return redirect()->intended(config("admin.route.prefix"));
        }else{
            return redirect()->back()->withInput()
                ->withErrors([
                    "login_name" => "用户名或密码错误"
                ]);
        }
    }

    /**
     * 注销登录
     * @return IlluminateHttpRedirectResponse|IlluminateRoutingRedirector
     */
    public function postLogout()
    {
        Auth::guard("administrator")->logout();

        session()->forget("url.intented");

        return redirect(config("admin.route.prefix"));
    }
}
至此，认证业务已经完成，接下来进行完善，使系统能够跑起来
创建视图文件（ps：1、控制器中使用的admin_view_base_path为自定义函数，指向后台视图文件主目录。2、视图采用AdminLTE框架）
login.blade:form

            @csrf

            

                
                

                @if ($errors->has("login_name"))
                
                    {{ $errors->first("login_name") }}
                
                @endif
            

            

                
                

                @if ($errors->has("password"))
                    
                        {{ $errors->first("password") }}
                    
                @endif
            

            

                

                    

                        
                             记住我
                        
                    
                

                
                

                    登 录
                
                
            
        

创建后台home控制器，运行：
php artisan make:controller Admin/Home/HomeController

编写index方法返回视图

若仅作登录之后跳转测试，home视图中保留注销按钮即可，例：
home.blade

    
        {{ __("注 销") }}
    



    @csrf

编辑配置文件config.admin.php,加入以下配置：
"route" => [
    "prefix" => "admin",

    "namespace" => "AppHttpControllersAdmin",

    "middleware" => ["web", "admin"],
],

编写路由文件routes/admin.php
 config("admin.route.prefix"),
    "namespace"     => config("admin.route.namespace"),
    "middleware"    => config("admin.route.middleware"),
], function (Router $router) {
    $router->get("/", "HomeHomeController@index");
    $router->get("login", "AuthLoginController@getLoginForm");
    $router->post("login", "AuthLoginController@postLogin");
    $router->post("logout", "AuthLoginController@postLogout");
});

数据表迁移与填充: 修改database/seeds/DatabaseSeeder
call(UsersTableSeeder::class);
        DB::table("administrators")->insert(
            [
                "login_name" => "admin",
                "display_name" => "超级管理员",
                "password" => bcrypt("123456"),
                "created_at" => date("Y-m-d H:i:s", time()),
                "updated_at" => date("Y-m-d H:i:s", time()),
            ]
        );
    }
}
运行：
php artisan migrate //数据表迁移
php artisan db:seed //数据填充

如果前台使用了laravel框架用户认证的话，需要重写框架生成的LoginController的logout方法。防止前台用户注销的时候清除后台用户的session。（ps:框架自带用户认证在注销时会清空所有session）
/**
 * 重写前台注销操作
 * @param Request $request
 * @return IlluminateHttpRedirectResponse|IlluminateRoutingRedirector
 */
public function logout(Request $request)
{
    $this->guard()->logout();

    $request->session()->forget("uri.intented");

    return redirect("/");
}

至此，后台用户登录全部完成。enjoy it！