Question

这是非常标准的登录功能和验证，效果很好。但我还想检查用户是否处于活动状态。我在users表中设置了一个列，其中'active'设置为0或1。

public function post_login() 
{
    $input = Input::all();

    $rules = array(
        'email' => 'required|email',
        'password' => 'required',
    );  

    $validation = Validator::make($input, $rules);

    if ($validation->fails())
    {
        return Redirect::to_route('login_user')
            ->with_errors($validation->errors)->with_input();
    }

    $credentials = array(
        'username' => $input['email'],
        'password' => $input['password'],
    );

    if (Auth::attempt($credentials)) 
    {
        // Set remember me cookie if the user checks the box
        $remember = Input::get('remember');
        if ( !empty($remember) )
        {
            Auth::login(Auth::user()->id, true);
        }

        return Redirect::home();

    } else {
        return Redirect::to_route('login_user')
            ->with('login_errors', true);
    }
}

我已经尝试过这样的事情：

$is_active = Auth::user()->active;

if (!$is_active == 1)
{
    echo "Account not activated";
}

但是这只能在“auth attempt”if语句中使用，并且此时用户凭据（电子邮件和通行证）已经过验证。因此，即使用户帐户此时尚未处于活动状态，他们也已登录。

我需要一种方法来返回验证，让他们知道他们仍然需要激活他们的帐户并检查他们的帐户是否在他们的电子邮件和通行证被检查的同时设置。

Answer 1

过滤器是最佳选择。解决这个问题简单易行，请参阅下面的示例。

Route::filter('auth', function()
{
    if (Auth::guest())
{
    if (Request::ajax())
    {
        return Response::make('Unauthorized', 401);
    }
    else
    {
        return Redirect::guest('login');
    }
}
else
{
    // If the user is not active any more, immidiately log out.
    if(Auth::check() && !Auth::user()->active)
    {
        Auth::logout();

        return Redirect::to('/');
    }
}
});

Answer 2

你不能使用这样的东西：

if (Auth::once($credentials))
{
    if(!Auth::user()->active) {
        Auth::logout();

        echo "Account not activated";
    }
}

Answer 3

只需将活动字段作为确认之一即可。你可以这样做：

$credentials = array(
        'username' => $input['email'],
        'password' => $input['password'],
        'active' => 1
    );

    if (Auth::attempt($credentials)) 
    {
        // User is active and password was correct
    }

如果您想明确告诉用户他们不活跃 - 您可以使用以下方式进行跟进：

    if (Auth::validate(['username' => $input['email'], 'password' => $input['password'], 'active' => 0]))
    {
        return echo ('you are not active');
    }

Answer 4

更好的解决方案可能是创建一个Auth驱动程序，该驱动程序扩展已使用的Eloquent Auth驱动程序，然后覆盖try方法。

然后更改您的auth配置以使用您的驱动程序。

类似的东西：

<?php

class Myauth extends Laravel\Auth\Drivers\Eloquent {

    /**
     * Attempt to log a user into the application.
     *
     * @param  array $arguments
     * @return void
     */
    public function attempt($arguments = array())
    {
        $user = $this->model()->where(function($query) use($arguments)
        {
            $username = Config::get('auth.username');

            $query->where($username, '=', $arguments['username']);

            foreach(array_except($arguments, array('username', 'password', 'remember')) as $column => $val)
            {
                $query->where($column, '=', $val);
            }
        })->first();

        // If the credentials match what is in the database we will just
        // log the user into the application and remember them if asked.
        $password = $arguments['password'];

        $password_field = Config::get('auth.password', 'password');

        if ( ! is_null($user) and Hash::check($password, $user->{$password_field}))
        {
            if ($user->active){
                return $this->login($user->get_key(), array_get($arguments, 'remember'));
            } else {
                Session::flash('authentication', array('message' => 'You must activate your account before you can log in'));
            }
        }

        return false;
    }
}
?>

在您的登录屏幕中，检查Session :: get（＆＃39;身份验证＆＃39;）并相应处理。

或者，允许他们登录，但不要让他们访问除提供重新发送激活电子邮件链接的页面以外的任何页面。

Answer 5

这就是我的所作所为：

if (\Auth::attempt(['EmailWork' => $credentials['EmailWork'], 'password' => $credentials['Password']], $request->has('remember'))) {
    if (\Auth::once(['EmailWork' => $credentials['EmailWork'], 'password' => $credentials['Password']])) {
        if (!\Auth::user()->FlagActive == 'Active') {
            \Auth::logout();
            return redirect($this->loginPath())
                ->withInput($request->only('EmailWork', 'RememberToken'))
                ->withErrors([
                    'Active' => 'You are not activated!',
                ]);
        }
    }

    return redirect('/');
}

return redirect($this->loginPath())
    ->withInput($request->only('EmailWork', 'RememberToken'))
    ->withErrors([
        'EmailWork' => $this->getFailedLoginMessage(),
    ]);

使用laravel检查活动用户状态

5 个答案: