总结Laravel用户认证

    //检查用户属否登录
    public function check();
    //游客检测
    public function guest();
    //获取当前认证的登录用户
    public function user();
    //获取当前认证的用户主键（id）
    public function id();
    //根据提供的凭证来验证登录
    public function validate(array $credentials = []);
    //设置用户，登录成功、check()认证成后都将user保存至当前请求生命周期对象，提高效率
    public function setUser(Authenticatable $user);Copy

// 尝试登录的凭证是否合法
public function attempt(array $credentials = [], $remember = false);
//登录一次成功后不做任何处理
public function once(array $credentials = []);
// 登录用户，成功后记录登录数据 
public function login(Authenticatable $user, $remember = false);
// 使用用户ID登录
public function loginUsingId($id, $remember = false);
// 使用用户ID登录,同once
public function onceUsingId($id);
// 通过remember token 自动登录
public function viaRemember();
// 登出
public function logout();Copy

class SessionGuard implements StatefulGuard, SupportsBasicAuth
{
    //GuardHelpers 实现接口
    use GuardHelpers, Macroable;
    ...
    public function __construct($name,
        UserProvider $provider,
        Session $session,
        Request $request = null)
    {
        $this->name = $name;
        $this->session = $session;
        $this->request = $request;
        $this->provider = $provider;
    }
    ...
    public function login(AuthenticatableContract $user, $remember = false)
    {
        .....
        $this->updateSession($user->getAuthIdentifier());
        ......
        $this->setUser($user);
    }
    ...
}Copy

// 唯一标识，数据库的话对应的默认是主键
public function getAuthIdentifierName();
// 获取唯一标识的值
public function getAuthIdentifier();
// 获取认证的密码
public function getAuthPassword();
// 获取remember token
public function getRememberToken();
// 设置 remember token
public function setRememberToken($value);
// 获取 remember token 对应的字段名，比如默认的 'remember_token'
public function getRememberTokenName();Copy

<?php

namespace App\Models;

use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;

class User extends Authenticatable
{
    ...
}Copy

<?php

namespace Illuminate\Foundation\Auth;

use Illuminate\Auth\Authenticatable;
...

class User extends Model implements
    AuthenticatableContract,
    AuthorizableContract,
    CanResetPasswordContract
{
    use Authenticatable, Authorizable, CanResetPassword, MustVerifyEmail;
}Copy

Route::group(['middleware' => ['auth']], function () {
    Route::get("/", "HomeController@home");
});Copy

    ...
    protected $routeMiddleware = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
        'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
    ];
    ...Copy

......
public function handle($request, Closure $next, ...$guards)
{
      $this->authenticate($request, $guards);

     return $next($request);
}

......
protected function authenticate($request, array $guards)
{
    if (empty($guards)) {
        $guards = [null];
    }
    foreach ($guards as $guard) {
        if ($this->auth->guard($guard)->check()) {
            return $this->auth->shouldUse($guard);
        }
    }
    $this->unauthenticated($request, $guards);
}Copy

public function user()
{
    ...
    //获取唯一标识
    $id = $this->session->get($this->getName());
    ...
    //根据标识读取用户数据
    if (! is_null($id) && $this->user = $this->provider->retrieveById($id)) {
        $this->fireAuthenticatedEvent($this->user);
    }
    ......
    //从remember me中读取自动登录
    if (is_null($this->user) && ! is_null($recaller = $this->recaller())) {
        $this->user = $this->userFromRecaller($recaller);

        if ($this->user) {
            $this->updateSession($this->user->getAuthIdentifier());

            $this->fireLoginEvent($this->user, true);
        }
    }
...
}Copy

namespace Illuminate\Contracts\Auth;

interface UserProvider
{
    //根据唯一标识符获取用户
    public function retrieveById($identifier);
    //根据token读取用户唯一标识符，无状态API适用
    public function retrieveByToken($identifier, $token);
    //基于认证模型更新token
    public function updateRememberToken(Authenticatable $user, $token);
    //基于认证模型获取用户
    public function retrieveByCredentials(array $credentials);
    //根据用户的给定的凭证认证用户
    public function validateCredentials(Authenticatable $user, array $credentials);
}Copy

public function retrieveById($identifier)
{
    $model = $this->createModel();

    return $this->newModelQuery($model)
        ->where($model->getAuthIdentifierName(), $identifier)
        ->first();
}Copy

return [

    'defaults' => [
        'guard' => 'web',
    '    passwords' => 'users',
    ],
    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],

        'api' => [
            'driver' => 'session',
            'provider' => 'token',
            'hash' => false,
        ],
    ],
    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\User::class,
        ],

        'token' => [
            'driver' => 'token',
            'model' => App\Models\User::class,
        ]
];Copy