centos laravel认证授权如何实现 - 问答

在CentOS系统上实现Laravel的认证和授权，可以按照以下步骤进行：

1. 安装Laravel

首先，确保你已经在CentOS上安装了PHP和Composer。然后，使用Composer创建一个新的Laravel项目：

composer create-project --prefer-dist laravel/laravel your_project_name

2. 配置数据库

编辑.env文件，配置你的数据库连接信息：

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=your_database_name
DB_USERNAME=your_database_user
DB_PASSWORD=your_database_password

然后运行迁移命令来创建数据库表：

php artisan migrate

3. 安装认证包

Laravel自带了认证系统，但你可以使用laravel-permission包来增强授权功能。

安装laravel-permission包：

composer require spatie/laravel-permission

发布配置文件：

php artisan vendor:publish --provider="Spatie\Permission\PermissionServiceProvider"

运行迁移命令来创建权限表：

php artisan migrate

4. 配置认证和授权

在config/auth.php文件中，确保你已经启用了Laravel的内置认证系统：

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],
],

在User模型中，使用HasRoles trait：

use Spatie\Permission\Traits\HasRoles;

class User extends Authenticatable
{
    use HasRoles;
    // ...
}

5. 创建控制器和路由

创建一个控制器来处理认证和授权逻辑：

php artisan make:controller AuthController

在AuthController中添加登录和注册方法：

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;

class AuthController extends Controller
{
    public function login(Request $request)
    {
        $credentials = $request->only('email', 'password');

        if (Auth::attempt($credentials)) {
            $request->session()->regenerate();
            return redirect()->intended('dashboard');
        }

        return back()->withErrors([
            'email' => 'The provided credentials do not match our records.',
        ]);
    }

    public function register(Request $request)
    {
        $request->validate([
            'name' => 'required|string|max:255',
            'email' => 'required|string|email|max:255|unique:users',
            'password' => 'required|string|min:8',
        ]);

        $user = User::create([
            'name' => $request->name,
            'email' => $request->email,
            'password' => bcrypt($request->password),
        ]);

        $user->assignRole('user');

        return redirect()->route('login')->with('success', 'User created successfully.');
    }

    public function logout()
    {
        Auth::logout();
        $request->session()->invalidate();
        return redirect('/');
    }
}

在routes/web.php文件中添加路由：

use App\Http\Controllers\AuthController;

Route::get('/login', [AuthController::class, 'showLoginForm'])->name('login');
Route::post('/login', [AuthController::class, 'login']);
Route::get('/register', [AuthController::class, 'showRegistrationForm'])->name('register');
Route::post('/register', [AuthController::class, 'register']);
Route::get('/logout', [AuthController::class, 'logout'])->name('logout');
Route::get('/dashboard', [AuthController::class, 'dashboard'])->name('dashboard')->middleware('auth');

6. 创建中间件

创建一个中间件来检查用户是否有权限访问某个路由：

php artisan make:middleware CheckPermission

在CheckPermission中间件中添加逻辑：

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;
use Spatie\Permission\Models\Role;

class CheckPermission
{
    public function handle($request, Closure $next, $permission)
    {
        if (!Auth::check()) {
            return redirect()->route('login');
        }

        if (!$request->user()->can($permission)) {
            abort(403);
        }

        return $next($request);
    }
}

注册中间件：

protected $routeMiddleware = [
    // ...
    'permission' => \App\Http\Middleware\CheckPermission::class,
];

在路由中使用中间件：

Route::get('/admin', [AuthController::class, 'admin'])->name('admin')->middleware('auth.permission:admin');

7. 创建视图

创建登录和注册视图文件：

resources/views/auth/login.blade.php
resources/views/auth/register.blade.php

在视图中添加表单：

<!-- resources/views/auth/login.blade.php -->
@extends('layouts.app')

@section('content')
<div class="container">
    <div class="row justify-content-center">
        <div class="col-md-8">
            <div class="card">
                <div class="card-header">{{ __('Login') }}</div>

                <div class="card-body">
                    <form method="POST" action="{{ route('login') }}">
                        @csrf

                        <div class="form-group row mb-0">
                            <div class="col-md-6 offset-md-4">
                                <input id="email" type="email" class="form-control @error('email') is-invalid @enderror" name="email" value="{{ old('email') }}" required autocomplete="email" placeholder="Email">

                                @error('email')
                                    <span class="invalid-feedback" role="alert">
                                        <strong>{{ $message }}</strong>
                                    </span>
                                @enderror
                            </div>

                            <div class="col-md-6">
                                <input id="password" type="password" class="form-control @error('password') is-invalid @enderror" name="password" required autocomplete="current-password" placeholder="Password">

                                @error('password')
                                    <span class="invalid-feedback" role="alert">
                                        <strong>{{ $message }}</strong>
                                    </span>
                                @enderror
                            </div>
                        </div>

                        <div class="form-group row mb-0">
                            <div class="col-md-8 offset-md-4">
                                <button type="submit" class="btn btn-primary">
                                    {{ __('Login') }}
                                </button>

                                <a class="btn btn-secondary" href="{{ route('register') }}">
                                    {{ __('Register') }}
                                </a>
                            </div>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
</div>
@endsection

8. 测试

现在你可以启动Laravel开发服务器并测试认证和授权功能：

php artisan serve

访问http://localhost:8000/login进行登录测试，访问http://localhost:8000/dashboard进行授权测试。

通过以上步骤，你可以在CentOS系统上实现Laravel的认证和授权功能。

0 赞

0 踩