Laravel API多表用户认证：多用户类型鉴权指南

// app/Models/User.php (默认已存在)
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable;
// ...其他代码

// app/Models/Student.php
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable; // 或者直接实现Authenticatable接口
class Student extends Authenticatable
{
    protected $table = 'students'; // 确保指向正确的表
    protected $fillable = [
        'name', 'email', 'password',
    ];
    protected $hidden = [
        'password', 'remember_token',
    ];
}

// app/Models/Teacher.php
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable;
class Teacher extends Authenticatable
{
    protected $table = 'teachers'; // 确保指向正确的表
    protected $fillable = [
        'name', 'email', 'password',
    ];
    protected $hidden = [
        'password', 'remember_token',
    ];
}

// config/auth.php

'providers' => [
    'users' => [
        'driver' => 'eloquent',
        'model' => App\Models\User::class,
    ],

    'students' => [
        'driver' => 'eloquent',
        'model' => App\Models\Student::class,
    ],

    'teachers' => [
        'driver' => 'eloquent',
        'model' => App\Models\Teacher::class,
    ],
],

// config/auth.php

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users', // 默认的web守卫
    ],

    'api' => [
        'driver' => 'token', // 或 'sanctum' / 'passport'
        'provider' => 'users', // 默认的api守卫
    ],

    // 为学生用户添加API守卫
    'api_student' => [
        'driver' => 'token', // 或者根据你使用的API认证方式选择，如'sanctum'
        'provider' => 'students',
    ],

    // 为教师用户添加API守卫
    'api_teacher' => [
        'driver' => 'token', // 或者根据你使用的API认证方式选择，如'sanctum'
        'provider' => 'teachers',
    ],
],

// app/Http/Controllers/Api/AuthController.php

namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Validation\ValidationException;

class AuthController extends Controller
{
    public function loginUser(Request $request)
    {
        $credentials = $request->validate([
            'email' => ['required', 'email'],
            'password' => ['required'],
        ]);

        if (Auth::guard('api')->attempt($credentials)) {
            $user = Auth::guard('api')->user();
            $token = $user->createToken('user_token')->plainTextToken; // 假设使用Sanctum
            return response()->json(['token' => $token, 'user' => $user], 200);
        }

        throw ValidationException::withMessages([
            'email' => ['提供的凭据与我们的记录不符。'],
        ]);
    }

    public function loginStudent(Request $request)
    {
        $credentials = $request->validate([
            'email' => ['required', 'email'],
            'password' => ['required'],
        ]);

        if (Auth::guard('api_student')->attempt($credentials)) {
            $student = Auth::guard('api_student')->user();
            $token = $student->createToken('student_token')->plainTextToken;
            return response()->json(['token' => $token, 'student' => $student], 200);
        }

        throw ValidationException::withMessages([
            'email' => ['提供的凭据与我们的记录不符。'],
        ]);
    }

    public function loginTeacher(Request $request)
    {
        $credentials = $request->validate([
            'email' => ['required', 'email'],
            'password' => ['required'],
        ]);

        if (Auth::guard('api_teacher')->attempt($credentials)) {
            $teacher = Auth::guard('api_teacher')->user();
            $token = $teacher->createToken('teacher_token')->plainTextToken;
            return response()->json(['token' => $token, 'teacher' => $teacher], 200);
        }

        throw ValidationException::withMessages([
            'email' => ['提供的凭据与我们的记录不符。'],
        ]);
    }
}

// routes/api.php

use App\Http\Controllers\Api\AuthController;
use Illuminate\Support\Facades\Route;

// 认证路由
Route::post('/login/user', [AuthController::class, 'loginUser']);
Route::post('/login/student', [AuthController::class, 'loginStudent']);
Route::post('/login/teacher', [AuthController::class, 'loginTeacher']);

// 保护用户路由
Route::middleware('auth:api')->group(function () {
    Route::get('/user/profile', function (Request $request) {
        return $request->user();
    });
});

// 保护学生路由
Route::middleware('auth:api_student')->group(function () {
    Route::get('/student/dashboard', function (Request $request) {
        return $request->user(); // 返回已认证的学生
    });
});

// 保护教师路由
Route::middleware('auth:api_teacher')->group(function () {
    Route::get('/teacher/courses', function (Request $request) {
        return $request->user(); // 返回已认证的教师
    });
});