使用中间件在 laravel 中进行用户身份验证

Question

我对 laravel 中内置的用户身份验证功能有疑问。我得到了身份验证部分，但似乎用户没有存储在会话中。
管理员控制代码：

<?php
namespace App\Http\Controllers\Admin;
use Illuminate\Http\Request;

use App\Http\Requests;
use App\Http\Controllers\Controller;
use Validator, Input, Redirect; 
use DB;
use Session;

class AdminController extends Controller
{
    public function index(Request $request)
    {
        if(isset($_POST['submit'])){
                    $v = Validator::make($request->all(), [
                    'email' => 'required',
                    'password' => 'required',
                    ],
                    [
                        'required' => 'This field is required.'
                    ]);

                    if ($v->fails())
                    {
                        $messages = $v->messages();
                        return redirect()->back()->withErrors($v)->withInput();
                    }
                   else
                   {

                        $email = $request->input('email');
                        $pass = $request->input('password');
                        $whereData = [
                                ['email',$email],
                                ['password',md5($pass)]
                            ];

                       $res = DB::table('tbl_admin_users')->where($whereData)->get();
                        if(!empty($res)){
                            $userid=$res[0]->id;
                            $fname=$res[0]->fname;
                            Session::put('userid', $userid);
                            Session::put('fname', $fname);
                            return Redirect('admin/dashboard-listing');
                    }
                        else
                        {
                            Session::flash('message', 'Email/Password is invalid!'); 
                            Session::flash('alert-class', 'alert-danger');
                            return Redirect('admin/login');
                        }
                    }
          }
          else{
            return view('admin.admin-login');
          }  


    }


 public function logout()
 {
    Session::flush();
    return Redirect('admin/login');
 }


}

中间件Authentication.php代码：

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class Authenticate
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if (Auth::guard($guard)->guest()) {
            if ($request->ajax() || $request->wantsJson()) {
                return response('Unauthorized.', 401);
            } else {
                return redirect()->guest('login');
            }
        }

        return $next($request);
    }
}

AuthController 我有：

<?php

namespace App\Http\Controllers\Auth;

use App\User;
use Validator;
use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\ThrottlesLogins;
use Illuminate\Foundation\Auth\AuthenticatesAndRegistersUsers;

class AuthController extends Controller
{
    /*
    |--------------------------------------------------------------------------
    | Registration & Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles the registration of new users, as well as the
    | authentication of existing users. By default, this controller uses
    | a simple trait to add these behaviors. Why don't you explore it?
    |
    */

    use AuthenticatesAndRegistersUsers, ThrottlesLogins;

    /**
     * Where to redirect users after login / registration.
     *
     * @var string
     */
    protected $redirectTo = '/';

    /**
     * Create a new authentication controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware($this->guestMiddleware(), ['except' => 'logout']);
    }

    /**
     * Get a validator for an incoming registration request.
     *
     * @param  array  $data
     * @return \Illuminate\Contracts\Validation\Validator
     */
    protected function validator(array $data)
    {
        return Validator::make($data, [
            'name' => 'required|max:255',
            'email' => 'required|email|max:255|unique:users',
            'password' => 'required|min:6|confirmed',
        ]);
    }

    /**
     * Create a new user instance after a valid registration.
     *
     * @param  array  $data
     * @return User
     */
    protected function create(array $data)
    {
        return User::create([
            'name' => $data['name'],
            'email' => $data['email'],
            'password' => bcrypt($data['password']),
        ]);
    }
}

正确的详细信息和登录页面路由后的路由：

Route::get('/admin/dashboard-listing',array('uses'=>'Admin\AdminDashboardController@index'));

注销后重定向路由：

Route::get('/admin/login',array('uses'=>'Admin\AdminController@index'));

我的问题是如何在这段代码中使用中间件。因为 注销后我可以轻松访问 url .back 按钮也可以工作 我希望通过中间件进行 laravel 用户身份验证..

Answer 1

你需要manually login user 和auth()->login():

$res = DB::table('tbl_admin_users')->where($whereData)->first();
if(!empty($res)) {
    $userid = $res[0]->id;
    $fname = $res[0]->fname;
    Session::put('userid', $userid);
    Session::put('fname', $fname);
    auth()->login($res);
    return Redirect('admin/dashboard-listing');
}

或者，您可以使用auth()->loginById($res->id) 方法。