Auth Session 退出他人正登录的账号、passport 退出登录

// admin表增加字段，type、object_id
$table->unsignedInteger('type')->default(0)->after('status')
      ->comment('类型：1=A后台，2=B后台，3=C后台，4=D后台，5=E角色');
 $table->unsignedInteger('object_id')->default(0)->after('type')
      ->comment('所属的对象id，如A平台id，B平台id，C平台id，D平台id');
 $table->unsignedTinyInteger('is_super')->default(2)->after('type')
      ->comment('是否是超级管理员，1=是，2=否');Copy

 'guards' => [
        'aaa' => [
            'driver'   => 'session',
            'provider' => 'admin',
        ],
        'bbb' => [
            'driver'   => 'session',
            'provider' => 'admin',
        ],
        'ccc' => [
            'driver'   => 'session',
            'provider' => 'admin',
        ],
        'ddd' => [
            'driver'   => 'session',
            'provider' => 'admin',
        ],
        'api' => [
            'driver'   => 'passport',
            'provider' => 'passport-provider'
        ],
    ],

 'providers' => [
        'admin'=> [
            'driver' => 'eloquent',
            'model'  => \App\Models\AdminModel::class,
        ],
        'passport-provider' => [
            'driver' => 'eloquent',
            'model' => \App\Models\AdminModel::class
        ]
    ],Copy

<?php

/**
 * @var $router \Laravel\Lumen\Routing\Router
 *
 * 后台管理员登录
 */
$router->group([
    'prefix' => 'admin/{authGuard}',
], function () use ($router) {
    require __DIR__ . '/../routes/admin_auth.php';
});

/**
 * 小程序登陆
 */
$router->group(['prefix' => 'api'], function () use ($router) {
    $router->post('client', [
        'uses'     => 'AuthClientController@store',
        'describe' => '管理员模块.生成客户端',
    ]);
    $router->post('token', [
        'uses'     => 'AuthAccessTokenController@issueToken',
        'describe' => '管理员模块.生成token',
    ]);

    require __DIR__ . '/../routes/admin_auth.php';
});
Copy

// A后台 a路由
$app->router->group([
    'namespace'  => 'App\Http\Controllers\AAA',
    'prefix'     => 'aaa',
    'middleware' => ['after', 'auth:aaa'] 
], function ($router) {
    require __DIR__ . '/../routes/aaa.php';
});

// B后台 bbb路由
$app->router->group([
    'namespace'  => 'App\Http\Controllers\BBB',
    'prefix'     => 'bbb',
    'middleware' => ['after', 'auth:bbb']
], function ($router) {
    require __DIR__ . '/../routes/bbb.php';
});

// C后台 ccc路由
$app->router->group([
    'namespace'  => 'App\Http\Controllers\CCC',
    'prefix'     => 'ccc',
    'middleware' => ['after', 'auth:ccc']
], function ($router) {
    require __DIR__ . '/../routes/ccc.php';
});

// 小程序  路由
$app->router->group([
    'namespace'  => 'App\Http\Controllers\Mini',
    'prefix'     => 'mini',
    'middleware' => ['after', 'auth:api']
], function ($router) {
    require __DIR__ . '/../routes/mini.php';
});Copy

use Illuminate\Database\Eloquent\Relations\Relation;
···
public static function boot()
{
  parent::boot();
  Relation::morphMap([
  '1' => self::class,
  '2' => AModel::class,
  '3' => BModel::class,
  '4' => CModel::class,
  '5' => DModel::class,
 ]);}

public function authObject()
{
  return $this->morphTo('authObject', 'type', 'object_id');
}Copy

    public function authObject()
    {
        return $this->morphMany(AdminModel::class, 'authObject');
    }Copy

   public function handle($request, Closure $next, $guard = 'api')
    {
        $guard = $request->authGuard ?? $guard;
        if (!$this->auth->guard($guard)->check()) {
            throw new BaseException(401, '账号登录过期，请重新登录');
        }

        $authUser = $this->auth->guard($guard)->user()->load('authObject');

        // 多态关联应用在这里
        if ( false == $admin->authObject->status ) {
            throw new BaseException(401, '登陆平台已被禁用');
        }

        return $next($request);
    }
Copy

    // 如果guard是api（即小程序）编辑oauth_access_tokens表
    // 如果是后台，直接调logout方法，logout方法也是laravel Auth开箱即用的方法
    public function logout()
    {
        'api' == $this->authGuard
            ? OauthAccessTokens::query()
            ->where('user_id', Auth::guard('api')->user()->id)
            ->update(['revoked' => 1])
            : Auth::guard($this->authGuard)->logout();

        return [];
    }Copy

 if (CorpAdminModel::STATUS_CLOSE == $admin->status) {
            throw new BaseException(401, '管理员账号已禁用');
 }Copy

 $table->unsignedInteger('last_edit_time')->default(0)->after('pinyin')
       ->comment('最后编辑时间');Copy

        // 每次登录都会更新最后登录时间，当最后编辑时间>最后登录时间，则表示是登录状态被编辑，需退出到登录页面
        if ($admin->last_edit_time > $admin->last_login_time) {
            if ('api' == $guard) {
                OauthAccessTokens::query()
                    ->where('user_id', $admin->id)
                    ->update(['revoked' => 1]);
            }
            throw new BaseException(401, '账号已被编辑，请重新登陆');
        }Copy

        // 之前的管理员账号添加
        $salt = substr(md5(uniqid()), 0, 6);
        $adminDetail = $this->adminService->add([
            'username' => $params['username'],
            'account' => $params['account'],
            'password' => md5($params['password'].$salt),
            'salt' => $salt,
        ]);

        // 之前的管理员密码错误
        $mdPassword = md5($password.$admin->salt);
        if ($mdPassword != $admin->password) {
            throw new BaseException(200005);
        }

        // 之前的认证信息保存
        Auth::guard('admin')->login($admin);Copy

     // 管理员账号添加
     ...
     $params['password'] = Hash::make(AdminModel::PASSWORD);
     return AdminModel::query()->create($params);

     // 登陆  attempt是laravel Auth开箱即用的方法，作用是校验及登陆
     if (!Auth::guard($authGuard)->attempt($params)) {
         throw new BaseException(567001, '管理员账号或密码不正确');
     }Copy