Laravel 8 中多角色多区段认证与重定向策略优化

// web.php
Route::get('/login', [AuthenticatedSessionController::class, 'create'])
    ->middleware('guest')
    ->name('login');

Route::post('/login', [AuthenticatedSessionController::class, 'store'])
    ->middleware('guest')
    ->name('login.user');

// AuthenticatedSessionController.php (原始实现示例)
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Http\Requests\Auth\LoginRequest; // 假设有自定义的登录请求验证

public function store(LoginRequest $request)
{
    $credentials = $request->validate([
        'email' => ['required', 'email'],
        'password' => ['required'],
    ]);

    // 区段1管理员
    if (Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_admin' => 1, 'section_id' => 1])) {
        $request->session()->regenerate();
        return redirect()->intended('dashboard/section1/admin');
    // 区段1用户
    } elseif (Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_admin' => 0, 'section_id' => 1])) {
        return redirect()->intended('dashboard/section1/user');
    // 区段2管理员
    } elseif (Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_admin' => 1, 'section_id' => 2])) {
        return redirect()->intended('dashboard/section2/admin');
    // ...以此类推，针对所有区段和角色组合
    } elseif (Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_admin' => 0, 'section_id' => 3])) {
        return redirect()->intended('dashboard/section3/user');     
    } else {
        return back()->withErrors([
            'email' => '提供的凭据与我们的记录不匹配。',
        ]);
    }
}

// AuthenticatedSessionController.php (优化实现)
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use App\Http\Requests\Auth\LoginRequest;

public function store(LoginRequest $request)
{
    // 1. 验证用户输入的凭据
    $credentials = $request->validate([
        'email' => ['required', 'email'],
        'password' => ['required'],
    ]);

    // 2. 尝试认证用户，仅进行一次
    if (Auth::attempt($credentials)) {
        // 认证成功，重新生成会话ID以防止会话固定攻击
        $request->session()->regenerate();

        // 3. 获取已认证的用户实例
        $user = Auth::user();

        // 4. 根据用户属性动态构建重定向路径
        // 假设 section_id 对应路径中的数字，is_admin 对应 'admin' 或 'user'
        $roleSegment = $user->is_admin ? 'admin' : 'user';
        $redirectPath = 'dashboard/section' . $user->section_id . '/' . $roleSegment;

        // 5. 重定向到目标路径
        return redirect()->intended($redirectPath);
    }

    // 认证失败，返回带错误信息的上一页
    return back()->withErrors([
        'email' => '提供的凭据与我们的记录不匹配。',
    ]);
}

-- 示例 users 表结构片段
CREATE TABLE `users` (
  `id` bigint unsigned NOT NULL AUTO_INCREMENT,
  `name` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL,
  `email` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL UNIQUE,
  `email_verified_at` timestamp NULL DEFAULT NULL,
  `password` varchar(255) COLLATE utf8mb4_unicode_ci NOT NULL,
  `is_admin` tinyint(1) NOT NULL DEFAULT '0', -- 0为普通用户，1为管理员
  `section_id` int NOT NULL DEFAULT '1',     -- 用户所属区段ID
  -- ... 其他字段
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;