{"id":848,"date":"2025-06-12T01:05:03","date_gmt":"2025-06-11T17:05:03","guid":{"rendered":"https:\/\/www.zhaozhao123.cn\/php\/php-application-manual\/laravel\/848.html"},"modified":"2025-06-12T01:05:03","modified_gmt":"2025-06-11T17:05:03","slug":"%e5%a6%82%e4%bd%95%e5%9c%a8-laravel-%e4%b8%ad%e5%ae%9e%e7%8e%b0%e5%af%86%e7%a0%81%e7%99%bb%e5%bd%95","status":"publish","type":"my1js","link":"https:\/\/www.zhaozhao123.cn\/php\/my1js\/848.html","title":{"rendered":"\u5982\u4f55\u5728 Laravel \u4e2d\u5b9e\u73b0\u5bc6\u7801\u767b\u5f55"},"content":{"rendered":"
\r\n
\r\n
\r\n
\r\n
\r\n
\"Bug编译狮\"<\/figure>\r\n\r\n\r\n\r\n

Bug编译狮<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
\r\n
\r\n

在 Laravel 中实现密码登录通常涉及以下几个步骤：<\/p>\n

    \n
  1. \n

    创建用户模型和迁移<\/strong>：\n首先，你需要为用户表创建模型和迁移文件。<\/p>\n

    php artisan make:model User<\/code><\/pre>\n
    然后编辑 User<\/code> 模型，并添加必要的字段（例如 email<\/code> 和 password<\/code>）。<\/p>\n
    \/\/ app\/Models\/User.php\n\nnamespace AppModels;\n\nuse IlluminateDatabaseEloquentFactoriesHasFactory;\nuse IlluminateFoundationAuthUser as Authenticatable;\n\nclass User extends Authenticatable\n{\n   use HasFactory;\n\n   protected $fillable = [\n       'name', 'email', 'password',\n   ];\n\n   protected $hidden = [\n       'password', 'remember_token',\n   ];\n}<\/code><\/pre>\n
    创建迁移文件：<\/p>\n
    php artisan make:migration create_users_table --create=users<\/code><\/pre>\n
    编辑生成的迁移文件并添加 email<\/code> 和 password<\/code> 字段。<\/p>\n
    \/\/ database\/migrations\/2023_04_01_000000_create_users_table.php\n\nuse IlluminateDatabaseMigrationsMigration;\nuse IlluminateDatabaseSchemaBlueprint;\nuse IlluminateSupportFacadesSchema;\n\nclass CreateUsersTable extends Migration\n{\n   public function up()\n   {\n       Schema::create('users', function (Blueprint $table) {\n           $table->id();\n           $table->string('name');\n           $table->string('email')->unique();\n           $table->timestamp('email_verified_at')->nullable();\n           $table->string('password');\n           $table->rememberToken();\n           $table->timestamps();\n       });\n   }\n\n   public function down()\n   {\n       Schema::dropIfExists('users');\n   }\n}<\/code><\/pre>\n<\/li>\n
  2. \n
    运行迁移<\/strong>：\n运行数据库迁移以创建用户表。<\/p>\n
    php artisan migrate<\/code><\/pre>\n<\/li>\n
  3. \n
    配置认证系统<\/strong>：\n打开 config\/auth.php<\/code> 文件，并确保以下配置正确：<\/p>\n
    \/\/ config\/auth.php\n\nreturn [\n   'defaults' => [\n       'guard' => 'web',\n       'api' => 'api',\n   ],\n\n   'guards' => [\n       'web' => [\n           'driver' => 'session',\n           'provider' => 'users',\n       ],\n       'api' => [\n           'driver' => 'token',\n           'provider' => 'users',\n       ],\n   ],\n\n   'providers' => [\n       'users' => [\n           'driver' => 'eloquent',\n           'model' => AppModelsUser::class,\n       ],\n   ],\n\n   'passwords' => [\n       'users' => [\n           'provider' => 'users',\n           'table' => 'password_resets',\n           'expire' => 60,\n       ],\n   ],\n];<\/code><\/pre>\n<\/li>\n
  4. \n
    创建控制器<\/strong>：\n创建一个控制器来处理登录逻辑。<\/p>\n
    php artisan make:controller AuthController<\/code><\/pre>\n
    编辑 AuthController<\/code> 控制器并添加登录方法。<\/p>\n
    \/\/ app\/Http\/Controllers\/AuthController.php\n\nnamespace AppHttpControllers;\n\nuse AppModelsUser;\nuse IlluminateHttpRequest;\nuse IlluminateSupportFacadesHash;\n\nclass AuthController extends Controller\n{\n   public function login(Request $request)\n   {\n       $credentials = $request->only(['email', 'password']);\n\n       if ($user = User::where('email', $credentials['email'])->first()) {\n           if (Hash::check($credentials['password'], $user->password)) {\n               auth()->login($user);\n               return redirect()->intended('\/');\n           } else {\n               return back()->withErrors(['password' => 'The provided password is incorrect.']);\n           }\n       } else {\n           return back()->withErrors(['email' => 'The provided email does not exist.']);\n       }\n   }\n}<\/code><\/pre>\n<\/li>\n
  5. \n
    创建路由<\/strong>：\n在 routes\/web.php<\/code> 文件中定义登录路由。<\/p>\n
    \/\/ routes\/web.php\n\nuse AppHttpControllersAuthController;\nuse IlluminateSupportFacadesRoute;\n\nRoute::get('\/login', [AuthController::class, 'login'])->name('login');\nRoute::post('\/login', [AuthController::class, 'login'])->name('login.post');<\/code><\/pre>\n<\/li>\n
  6. \n
    创建登录表单<\/strong>：\n创建一个简单的 HTML 表单来提交登录请求。<\/p>\n
    <!-- resources\/views\/login.blade.php -->\n\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n   <meta charset=\"UTF-8\">\n   <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n   <title>Login<\/title>\n<\/head>\n<body>\n   <h1>Login<\/h1>\n   @if ($errors->any())\n       <div class=\"alert alert-danger\">\n           <ul>\n               @foreach ($errors->all() as $error)\n                   <li>{{ $error }}<\/li>\n               @endforeach\n           <\/ul>\n       <\/div>\n   @endif\n   <form action=\"{{ route('login.post') }}\" method=\"POST\">\n       @csrf\n       <label for=\"email\">Email:<\/label>\n       <input type=\"email\" id=\"email\" name=\"email\" required><br><br>\n       <label for=\"password\">Password:<\/label>\n       <input type=\"password\" id=\"password\" name=\"password\" required><br><br>\n       <button type=\"submit\">Login<\/button>\n   <\/form>\n<\/body>\n<\/html><\/code><\/pre>\n<\/li>\n<\/ol>\n
    通过以上步骤，你可以在 Laravel 中实现基本的密码登录功能。如果你需要更复杂的登录逻辑或安全措施，请参考 Laravel 的官方文档。<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
    \r\n
    \r\n
    \r\n
    \r\n
    \r\n
    \"黑板Bug讲师\"<\/figure>\r\n\r\n\r\n\r\n
    黑板Bug讲师<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
    \r\n
    \r\n
    介绍<\/h2>
    Laravel 是一个强大的且受欢迎的PHP框架，用于Web 应用程序开发。它提供了构建安全且可扩展 Web 应用程序所需的强大功能。Laravel 提供了一个无缝的身份验证系统。在本教程中，我们将从头开始探索如何实现 Laravel 中的基本身份验证系统。我们首先会探讨基础概念，逐步深入更高级的概念，包括表单验证、密码哈希和认证中间件。<\/p>
    先决条件<\/h3>
    在开始之前，请确保您已经安装了以下软件：<\/p>
    一个工作数据库设置（如 MySQL、PostgreSQL、SQLite 等）<\/p>
    作曲家<\/p>
    PHP 7.3 或者更高版本<\/p>
    推荐使用 Laravel 8.0 或更高版本。<\/p>
    注意：本指南假设您对Laravel和MVC架构有基本的理解。<\/p>
    设置身份验证框架<\/h2>
    Laravel 提供了一个方便的命令来设置身份验证框架。使用内置的命令行工具 Artisan 来创建必要的控制器、视图和路由：<\/p>
    php artisan ui bootstrap --auth\n<\/code><\/pre>
    该命令将生成基本登录和注册系统的视图、路由和控制器所需的内容。要编译前端资产，请运行以下命令：<\/p>
    npm install\nnpm run dev\n<\/code><\/pre>
    请配置您的 .env 文件以连接到数据库，并然后迁移默认用户表：<\/p>
    php artisan migrate\n<\/code><\/pre>
    创建登录路由。<\/h2>
    在完成身份验证框架后，登录路由将在‘routes\/web.php’文件内定义。<\/p>
    Auth::routes();\n<\/code><\/pre>
    访问“\/login”以查看Laravel提供的默认登录表单。该表单由“AppHttpControllersAuthLoginController”后端控制器支持。<\/p>
    理解登录控制器（LoginController）<\/h2>
    Laravel的LoginController负责处理登录请求。你可以重写authenticate方法，这是通常用来定制登录行为的地方。下面是默认的方法：<\/p>
    public function authenticate(Request $request)\n{\n    $credentials = $request->only('email', 'password');\n\n    if (Auth::attempt($credentials)) {\n        \/\/ Authentication passed...\n        return redirect()->intended('dashboard');\n    }\n}\n<\/code><\/pre>
    当用户提交登录表单时，上述的authenticate方法会被触发。Auth::attempt 是Laravel内置的一个函数，用于验证用户凭证是否与数据库中的记录匹配。如果认证成功，用户会被重定向到目标页面，通常就是仪表板。<\/p>
    验证输入数据<\/h2>
    数据验证在任何登录系统中都至关重要。Laravel的“Request”类提供了“validate”方法，您可以使用它来应用输入验证规则。请修改“authenticate”函数以包含验证规则：<\/p>
    public function authenticate(Request $request)\n{\n    \/\/ Validate the form data\n    $credentials = $request->validate([\n        'email' => 'required|email',\n        'password' => 'required'\n    ]);\n\n    \/\/ Authenticate the user\n    if (Auth::attempt($credentials)) {\n        \/\/ Authentication passed...\n        return redirect()->intended('dashboard');\n    }\n\n    \/\/ Authentication failed...\n    return back()->withErrors([\n        'email' => 'The provided credentials do not match our records.',\n    ]);\n}\n<\/code><\/pre>
    该方法抛出一个异常，会将用户重定向回带有验证错误的表单。<\/p>
    密码哈希和安全性<\/h2>
    Laravel自带内置的哈希支持，你应该始终使用它来处理密码。默认情况下，Laravel 使用bcrypt哈希算法。在注册用户时，请确保他们的密码已进行哈希处理。<\/p>
    $user = User::create([\n    'name' => $request->name,\n    'email' => $request->email,\n    \/\/ Use the Hash facade to secure the password\n    'password' => Hash::make($request->password),\n]);\n<\/code><\/pre>
    不要在数据库中存储明文密码。Laravel的User模型在设置password属性时会自动对密码进行哈希处理，假设你使用的是IlluminateSupportFacadesHash类。<\/p>
    高级：自定义身份验证守卫<\/h2>
    Laravel的身份验证系统非常灵活，允许您定义自定义的守护程序。守护程序定义用户对每个请求进行身份验证的方式。例如，您可以为您的网站管理员或API用户提供一个单独的守护程序。<\/p>
    为了创建自定义的守护者，你需要在 config\/auth.php 文件中进行定义，并且通常还会创建一个自定义的提供者。以下是一个自定义守护者的配置示例：<\/p>
    'guards' => [\n    'admin' => [\n        'driver' => 'session',\n        'provider' => 'admins',\n    ],\n],\n'providers' => [\n    'admins' => [\n        'driver' => 'eloquent',\n        'model' => AppModelsAdmin::class,\n    ],\n],\n<\/code><\/pre>
    为了通过自定义的检查点进行身份验证，可以使用以下方法：<\/p>
    if (Auth::guard('admin')->attempt($credentials)) {\n    \/\/ Admin authentication passed...\n}\n<\/code><\/pre>
    集成中间件<\/h2>
    使用 –auth 选项设置身份验证时，会自动为您的路由应用 auth 中间件： Laravel 中间件确保只有认证用户才能访问某些路由。中间件可以重定向访客到登录页面并保护路由。 ‘auth’ 中间件会在使用 –auth 参数设置身份验证时自动应用于您的路由：<\/p>
    Route::middleware('auth')->group(function () {\n    Route::get('\/dashboard', [DashboardController::class, 'index']);\n});\n<\/code><\/pre>
    任何试图通过访客访问‘\/dashboard’的尝试都会被重定向到登录页面。<\/p>
    结论。<\/h2>
    我们已经讨论了如何在Laravel中实现密码登录系统。从基本的认证框架设置开始，我们探讨了自定义化和安全实践，如输入验证和密码哈希。Laravel的auth系统的灵活性允许处理复杂的场景，包括自定义守护程序和中间件。有了这些技能，你现在可以为你的Laravel应用实施强大的认证功能。<\/p><\/body>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
    \r\n
    \r\n
    \r\n
    \r\n
    \r\n
    \"长工码奴1523\"<\/figure>\r\n\r\n\r\n\r\n
    长工码奴1523<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
    \r\n
    \r\n
    Laravel 是一个非常流行的 PHP 开发框架，它提供了丰富的功能和强大的安全性特性。下面我将向您介绍如何在 Laravel 中实现简单的密码登录。<\/p>\n
    步骤 1: 创建一个新的控制器<\/h3>\n
    首先，我们需要创建一个新的控制器来处理用户认证。我们将使用 Auth<\/code> 类别作为基础，并扩展它以提供我们的逻辑。<\/p>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse IlluminateFoundationBusDispatchesJobs;\nuse IlluminateRoutingController as BaseController;\nuse IlluminateFoundationValidationValidatesRequests;\nuse IlluminateFoundationAuthAccessAuthorizesRequests;\n\nclass AuthController extends Controller\n{\n    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;\n\n    \/**\n     * Create a new authentication controller instance.\n     *\n     * @return void\n     *\/\n    public function __construct()\n    {\n        $this->middleware('guest');\n    }\n}<\/code><\/pre>\n
    步骤 2: 实现登录路由<\/h3>\n
    接下来，我们为登录页面添加一个路由。我们将使用 Route::get()<\/code> 函数来设置一个 GET 请求的路由。<\/p>\n
    <?php\n\n\/\/ app\/Http\/routes.php\n\nRoute::group(['prefix' => 'auth'], function () {\n    Route::post('\/login', 'AuthController@login')->name('login');\n\n    Route::post('\/logout', 'AuthController@logout')->name('logout');\n});<\/code><\/pre>\n
    步骤 3: 实现登录验证逻辑<\/h3>\n
    在 AuthController.php<\/code> 文件中，我们将实现登录验证逻辑。这个逻辑包括验证用户名和密码是否正确。<\/p>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse IlluminateFoundationBusDispatchesJobs;\nuse IlluminateRoutingController as BaseController;\nuse IlluminateFoundationValidationValidatesRequests;\nuse IlluminateFoundationAuthAccessAuthorizesRequests;\n\nclass AuthController extends BaseController\n{\n    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;\n\n    \/**\n     * 登录用户的逻辑。\n     *\n     * @param  array  $credentials\n     * @return bool\n     *\/\n    protected function login(array $credentials)\n    {\n        \/\/ 在这里添加实际的身份验证逻辑\n        if (Auth::attempt($credentials)) {\n            return true;\n        }\n\n        return false;\n    }\n\n    \/**\n     * 用户登出的逻辑。\n     *\n     * @return mixed\n     *\/\n    protected function logout()\n    {\n        Auth::logout();\n\n        return redirect()->route('login');\n    }\n}<\/code><\/pre>\n
    步骤 4: 使用 Laravel 的身份验证库<\/h3>\n
    最后一步是启用 Laravel 的身份验证库。这样，您的应用程序就可以安全地存储和检索用户的凭据了。<\/p>\n
    composer require laravelcollective\/html<\/code><\/pre>\n
    现在，您可以使用以下命令激活身份验证：<\/p>\n
    php artisan config:cache<\/code><\/pre>\n
    这将在您的 .env<\/code> 文件中保存配置信息，然后您可以在应用中使用 Auth::guard()<\/code> 方法获取用户身份。<\/p>\n
    示例代码<\/h3>\n
    以下是完整的示例代码，展示了如何在 Laravel 中实现密码登录。<\/p>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse IlluminateFoundationBusDispatchesJobs;\nuse IlluminateRoutingController as BaseController;\nuse IlluminateFoundationValidationValidatesRequests;\nuse IlluminateFoundationAuthAccessAuthorizesRequests;\nuse IlluminateSupportFacadesHash;\n\nclass AuthController extends BaseController\n{\n    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;\n\n    \/**\n     * 登录用户的逻辑。\n     *\n     * @param  array  $credentials\n     * @return bool\n     *\/\n    protected function login(array $credentials)\n    {\n        $user = User::where('email', $credentials['email'])->first();\n\n        if (!$user || ! Hash::check($credentials['password'], $user->password)) {\n            return response()->json([\n                'error' => 'Invalid credentials'\n            ], 400);\n        }\n\n        return true;\n    }\n\n    \/**\n     * 用户登出的逻辑。\n     *\n     * @return mixed\n     *\/\n    protected function logout()\n    {\n        auth()->logout();\n\n        return redirect()->route('login');\n    }\n}<\/code><\/pre>\n
    在这个例子中，我们定义了一个名为 User<\/code> 的模型类，其中包含了用户的电子邮件和密码字段。请注意，你需要根据实际情况替换这些字段名。<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"
    Bug编译狮 在 Laravel 中实现密码登录通常涉及以下几&#2..<\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false},"tags":[],"my1js2nav":[44],"tuisongtax":[],"class_list":["post-848","my1js","type-my1js","status-publish","hentry","my1js2nav-laravel"],"acf":{"qian_art_seotitle":"","qian_art_seotitle_source":{"label":"SEO\u6807\u9898","type":"text","formatted_value":""},"qian_art_seokws":"","qian_art_seokws_source":{"label":"SEO\u5173\u952e\u8bcd","type":"text","formatted_value":""},"qian_art_stzhong":"","qian_art_stzhong_source":{"label":"\u4e2d | \u77ed\u6807\u9898","type":"text","formatted_value":""}},"_links":{"self":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js\/848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js"}],"about":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/types\/my1js"}],"author":[{"embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/users\/1"}],"wp:attachment":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/media?parent=848"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tags?post=848"},{"taxonomy":"my1js2nav","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js2nav?post=848"},{"taxonomy":"tuisongtax","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tuisongtax?post=848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}