Laravel的Auth模塊使用

return [
 'defaults' => [
 'guard' => 'web',
 ...
 ],
 'guards' => [ 
 'web' => [
 'driver' => 'session',
 'provider' => 'users',
 ],
 'api' => [ 
 'driver' => 'token', 
 'provider' => 'users',
 ],
 ],
 'providers' => [
 'users' => [
 'driver' => 'eloquent',
 'model' => AppUser::class,
 ], 
 ],
], 
];

// $credentials數(shù)組存放認證條件，比如郵箱或者用戶名、密碼
// $remember 表示是否要記住，生成 `remember_token`
public function attempt(array $credentials = [], $remember = false) 
 
public function login(AuthenticatableContract $user, $remember = false)
 
public function loginUsingId($id, $remember = false)

public function basic($field = 'email', $extraConditions = [])

public function once(array $credentials = [])
public function onceUsingId($id)
public function onceBasic($field = 'email', $extraConditions = [])

return [
 'defaults' => [
 'passwords' => 'users',
 ...
 ],
 
 'passwords' => [
 'users' => [
 'provider' => 'users',
 'table' => 'password_resets',
 'expire' => 60,
 ],
 ],
]

public function reset(array $credentials, Closure $callback) {
 // 驗證用戶名、密碼和 token 是否有效
 $user = $this->validateReset($credentials);
 if (! $user instanceof CanResetPasswordContract) {
 return $user;
 } 
 
 $password = $credentials['password'];
 // 回調(diào)函數(shù)執(zhí)行修改密碼，及持久化存儲
 $callback($user, $password);
 // 刪除重置密碼時持久化存儲保存的 token
 $this->tokens->delete($user);
 return static::PASSWORD_RESET;
}

// 暴露的重置密碼 API
public function reset(Request $request) {
 // 驗證請求參數(shù) token、email、password、password_confirmation
 $this->validate($request, $this->rules(), $this->validationErrorMessages());
 // 調(diào)用重置密碼的方法，第二個參數(shù)是回調(diào)，做一些持久化存儲工作
 $response = $this->broker()->reset(
 $this->credentials($request), function ($user, $password) {
 $this->resetPassword($user, $password);
 }
 );
 // 封裝 Response
 return $response == Password::PASSWORD_RESET
 ? $this->sendResetResponse($response)
 : $this->sendResetFailedResponse($request, $response);
}
// 獲取重置密碼時的請求參數(shù)
protected function credentials(Request $request) {
 return $request->only(
 'email', 'password', 'password_confirmation', 'token'
 );
}
// 重置密碼的真實性驗證后，進行的持久化工作
protected function resetPassword($user, $password) {
 // 修改后的密碼、重新生成 remember_token
 $user->forceFill([
 'password' => bcrypt($password),
 'remember_token' => Str::random(60),
 ])->save();
 // session 中的用戶信息也進行重新賦值 
 $this->guard()->login($user);
}

$abilities = array(
 '定義的動作名，比如以路由的 as 名(common.dashboard.list)' => function($user) {
 // 方法的參數(shù)，第一位是 $user, 當前 user, 后面的參數(shù)可以自行決定
 return true; // 返回 true 意味有權(quán)限， false 意味沒有權(quán)限
 },
 ......
);

class PostPolicy {
 // update 權(quán)限，文章作者才可以修改
 public function update(User $user, Post $post) {
 return $user->id === $post->user_id;
 }
}

protected $policies = [
 Post::class => PostPolicy::class,
];

$gate = app(IlluminateContractsAuthAccessGate::class);
$reflection_gate = new ReflectionClass($gate);
$policies = $reflection_gate->getProperty('policies');
$policies->setAccessible(true);
// 獲取當前注冊的 policies 數(shù)組
dump($policies->getValue($gate));
 
$abilities = $reflection_gate->getProperty('abilities'); 
$abilities->setAccessible(true);
// 獲取當前注冊的 abilities 數(shù)組
dump($abilities->getValue($gate));