通过修改Laravel Auth使用salt和password进行认证用户详解

php artisan make:auth

Route::auth();

/**
 * Register the typical authentication routes for an application.
 *
 * @return void
 */
public function auth()
{
 // Authentication Routes...
 $this->get('login','AuthAuthController@showLoginForm');
 $this->post('login','AuthAuthController@login');
 $this->get('logout','AuthAuthController@logout');
 // Registration Routes...
 $this->get('register','AuthAuthController@showRegistrationForm');
 $this->post('register','AuthAuthController@register');
 // Password Reset Routes...
 $this->get('password/reset/{token?}','AuthPasswordController@showResetForm');
 $this->post('password/email','AuthPasswordController@sendResetLinkEmail');
 $this->post('password/reset','AuthPasswordController@reset');
}

/**
 * Handle a registration request for the application.
 *
 * @param IlluminateHttpRequest $request
 * @return IlluminateHttpResponse
 */
public function register(Request $request)
{
 $validator = $this->validator($request->all());
 if ($validator->fails()) {
 $this->throwValidationException(
  $request,$validator
 );
 }
 Auth::guard($this->getGuard())->login($this->create($request->all()));
 return redirect($this->redirectPath());
}

protected function validator(array $data)
{
 return Validator::make($data,[
 'name' => 'required|max:255','email' => 'required|email|max:255|unique:user','password' => 'required|size:40|confirmed',]);
}

/**
 * Create a new user instance after a valid registration.
 *
 * @param array $data
 * @return User
 */
protected function create(array $data)
{
 $salt = Str::random(6);
 return User::create([
 'nickname' => $data['name'],'email' => $data['email'],'password' => sha1($salt . $data['password']),'register_time' => time(),'register_ip' => ip2long(request()->ip()),'salt' => $salt
 ]);
}

 $this->get('login','AuthAuthController@logout');

/**
 * Handle a login request to the application.
 *
 * @param IlluminateHttpRequest $request
 * @return IlluminateHttpResponse
 */
public function login(Request $request)
{
 $this->validateLogin($request);
 $throttles = $this->isUsingThrottlesLoginsTrait();
 if ($throttles && $lockedOut = $this->hasTooManyLoginAttempts($request)) {
 $this->fireLockoutEvent($request);
 return $this->sendLockoutResponse($request);
 }
 $credentials = $this->getCredentials($request);
 if (Auth::guard($this->getGuard())->attempt($credentials,$request->has('remember'))) {
 return $this->handleUserWasAuthenticated($request,$throttles);
 }
 if ($throttles && ! $lockedOut) {
 $this->incrementLoginAttempts($request);
 }
 return $this->sendFailedLoginResponse($request);
}

public function attempt(array $credentials = [],$remember = false,$login = true)
{
 $this->fireAttemptEvent($credentials,$remember,$login);
 $this->lastAttempted = $user = $this->provider->retrieveByCredentials($credentials);
 if ($this->hasValidCredentials($user,$credentials)) {
 if ($login) {
  $this->login($user,$remember);
 }
 return true;
 }
 if ($login) {
 $this->fireFailedEvent($user,$credentials);
 }
 return false;
}
/**
 * Determine if the user matches the credentials.
 *
 * @param mixed $user
 * @param array $credentials
 * @return bool
 */
protected function hasValidCredentials($user,$credentials)
{
 return ! is_null($user) && $this->provider->validateCredentials($user,$credentials);
}

'providers' => [
 'users' => [
 'driver' => 'eloquent','model' => AppUser::class,//这个是driver用的Model
 ],],

/**
 * Retrieve a user by the given credentials.
 *
 * @param array $credentials
 * @return IlluminateContractsAuthAuthenticatable|null
 */
public function retrieveByCredentials(array $credentials)
{
 if (empty($credentials)) {
 return;
 }
 $query = $this->createModel()->newQuery();
 foreach ($credentials as $key => $value) {
 if (! Str::contains($key,'password')) {
  $query->where($key,$value);
 }
 }
 return $query->first();
}
/**
 * Validate a user against the given credentials.
 *
 * @param IlluminateContractsAuthAuthenticatable $user
 * @param array $credentials
 * @return bool
 */
public function validateCredentials(UserContract $user,array $credentials)
{
 $plain = $credentials['password'];
 return $this->hasher->check($plain,$user->getAuthPassword());
}

/**
 * The table associated to this model
 */
protected $table = 'user';／／用户表名不是laravel约定的这里要指定一下

/**
 * 禁用Laravel自动管理timestamp列
 */
public $timestamps = false;
/**
 * 覆盖Laravel中默认的getAuthPassword方法,返回用户的password和salt字段
 * @return type
 */
public function getAuthPassword()
{
 return ['password' => $this->attributes['password'],'salt' => $this->attributes['salt']];
}

namespace AppFoundationAuth;
use IlluminateAuthEloquentUserProvider;
use IlluminateContractsAuthAuthenticatable;
use IlluminateSupportStr;
class AdminEloquentUserProvider extends EloquentUserProvider
{
 /**
  * Validate a user against the given credentials.
  *
  * @param IlluminateContractsAuthAuthenticatable $user
  * @param array $credentials
  */
 public function validateCredentials(Authenticatable $user,array $credentials) {
  $plain = $credentials['password'];
  $authPassword = $user->getAuthPassword();
  return sha1($authPassword['salt'] . $plain) == $authPassword['password'];
 }
}

'providers' => [
 'users' => [
  'driver' => 'admin-eloquent',]
]

public function boot(GateContract $gate)
{
 $this->registerPolicies($gate);
 Auth::provider('admin-eloquent',function ($app,$config) {
  return New AppFoundationAuthAdminEloquentUserProvider($app['hash'],$config['model']);
 });
}

public function provider($name,Closure $callback)
{
 $this->customProviderCreators[$name] = $callback;
 return $this;
}

CREATE TABLE `password_resets` (
 `email` varchar(255) COLLATE utf8_unicode_ci NOT NULL,`token` varchar(255) COLLATE utf8_unicode_ci NOT NULL,`created_at` timestamp NOT NULL,KEY `password_resets_email_index` (`email`),KEY `password_resets_token_index` (`token`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci;

 $this->post('password/reset','AuthPasswordController@reset');

/**
 * Reset the given user's password.
 *
 * @param IlluminateHttpRequest $request
 * @return IlluminateHttpResponse
 */
public function reset(Request $request)
{
 $this->validate(
  $request,$this->getResetValidationRules(),$this->getResetValidationMessages(),$this->getResetValidationCustomAttributes()
 );
 $credentials = $this->getResetCredentials($request);
 $broker = $this->getBroker();
 $response = Password::broker($broker)->reset($credentials,function ($user,$password) {
  $this->resetPassword($user,$password);
 });
 switch ($response) {
  case Password::PASSWORD_RESET:
   return $this->getResetSuccessResponse($response);
  default:
   return $this->getResetFailureResponse($request,$response);
 }
}

/**
 * Reset the password for the given token.
 *
 * @param array $credentials
 * @param Closure $callback
 * @return mixed
 */
public function reset(array $credentials,Closure $callback)
{
 // If the responses from the validate method is not a user instance,we will
 // assume that it is a redirect and simply return it from this method and
 // the user is properly redirected having an error message on the post.
 $user = $this->validateReset($credentials);
 if (! $user instanceof CanResetPasswordContract) {
  return $user;
 }
 $pass = $credentials['password'];
 // Once we have called this callback,we will remove this token row from the
 // table and return the response from this callback so the user gets sent
 // to the destination given by the developers from the callback return.
 call_user_func($callback,$user,$pass);
 $this->tokens->delete($credentials['token']);
 return static::PASSWORD_RESET;
}

function ($user,$password) {
 $this->resetPassword($user,$password);
});

protected function resetPassword($user,$password)
{
 $user->forceFill([
  'password' => bcrypt($password),'remember_token' => Str::random(60),])->save();
 Auth::guard($this->getGuard())->login($user);
}

/**
 * 覆盖ResetsPasswords traits里的resetPassword方法,改为用sha1(salt + password)的加密方式
 * Reset the given user's password.
 *
 * @param IlluminateContractsAuthCanResetPassword $user
 * @param string $password
 * @return void
 */
protected function resetPassword($user,$password)
{
 $salt = Str::random(6);
 $user->forceFill([
  'password' => sha1($salt . $password),'salt' => $salt,])->save();
 Auth::guard($this->getGuard())->login($user);
}