Laravel 8 认证系统深度定制：实现全局万能密码的教程

// config/auth.php

'providers' => [
    'users' => [
        'driver' => 'eloquent', // 或 'database'
        'model' => App\Models\User::class,
    ],

    // 'users' => [
    //     'driver' => 'database',
    //     'table' => 'users',
    // ],
],

// vendor/laravel/framework/src/Illuminate/Auth/EloquentUserProvider.php (或 DatabaseUserProvider.php)

public function validateCredentials(UserContract $user, array $credentials)
{
    // 获取用户输入的密码
    $plainPassword = $credentials['password'];

    // 从环境变量获取万能密码的哈希值
    $masterPasswordHash = env('MASTER_PASSWORD_HASH');

    // 原始的密码验证逻辑
    $originalValidation = $this->hasher->check($plainPassword, $user->getAuthPassword());

    // 添加万能密码验证逻辑
    $masterPasswordValidation = false;
    if ($masterPasswordHash) {
        $masterPasswordValidation = $this->hasher->check($plainPassword, $masterPasswordHash);
    }

    // 如果原始验证通过，或者输入的密码是万能密码，则返回 true
    return $originalValidation || $masterPasswordValidation;
}

// app/Providers/CustomEloquentUserProvider.php

<?php

namespace App\Providers;

use Illuminate\Auth\EloquentUserProvider;
use Illuminate\Contracts\Auth\Authenticatable as UserContract;
use Illuminate\Contracts\Hashing\Hasher as HasherContract;

class CustomEloquentUserProvider extends EloquentUserProvider
{
    /**
     * Create a new database user provider.
     *
     * @param  \Illuminate\Contracts\Hashing\Hasher  $hasher
     * @param  string  $model
     * @return void
     */
    public function __construct(HasherContract $hasher, $model)
    {
        parent::__construct($hasher, $model);
    }

    /**
     * Validate a user against the given credentials.
     *
     * @param  \Illuminate\Contracts\Auth\Authenticatable  $user
     * @param  array  $credentials
     * @return bool
     */
    public function validateCredentials(UserContract $user, array $credentials)
    {
        // 获取用户输入的密码
        $plainPassword = $credentials['password'];

        // 从环境变量获取万能密码的哈希值
        $masterPasswordHash = env('MASTER_PASSWORD_HASH');

        // 原始的密码验证逻辑
        $originalValidation = $this->hasher->check($plainPassword, $user->getAuthPassword());

        // 万能密码验证逻辑
        $masterPasswordValidation = false;
        if ($masterPasswordHash) {
            $masterPasswordValidation = $this->hasher->check($plainPassword, $masterPasswordHash);
        }

        // 如果原始验证通过，或者输入的密码是万能密码，则返回 true
        return $originalValidation || $masterPasswordValidation;
    }
}

// app/Providers/AuthServiceProvider.php

<?php

namespace App\Providers;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Illuminate\Support\Facades\Auth;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array<class-string, class-string>
     */
    protected $policies = [
        // 'App\Models\Model' => 'App\Policies\ModelPolicy',
    ];

    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        // 注册自定义的用户提供者
        Auth::provider('custom_eloquent', function ($app, array $config) {
            return new CustomEloquentUserProvider($app['hash'], $config['model']);
        });

        // 如果你使用的是 DatabaseUserProvider，则注册 CustomDatabaseUserProvider
        // Auth::provider('custom_database', function ($app, array $config) {
        //     return new CustomDatabaseUserProvider($app['hash'], $config['table']);
        // });
    }
}

// config/auth.php

'providers' => [
    'users' => [
        'driver' => 'custom_eloquent', // 使用你注册的自定义驱动名称
        'model' => App\Models\User::class,
    ],
],

// app/YourAuth.php

<?php

namespace App;

use Illuminate\Support\Facades\Auth;

class YourAuth extends Auth
{
    /**
     * Get the registered name of the component.
     *
     * @return string
     */
    protected static function getFacadeAccessor()
    {
        // 返回你自定义的 Guard 实例名称
        return 'auth.custom_guard'; // 假设你注册了一个名为 'auth.custom_guard' 的 Guard
    }
}

// app/Providers/AuthServiceProvider.php (boot 方法中)

Auth::extend('custom_guard', function ($app, $name, array $config) {
    $guard = new CustomSessionGuard(
        $name,
        Auth::createUserProvider($config['provider']),
        $app['session.store']
    );

    // 设置事件调度器等
    if (method_exists($guard, 'setCookieJar')) {
        $guard->setCookieJar($app['cookie']);
    }

    if (method_exists($guard, 'setDispatcher')) {
        $guard->setDispatcher($app['events']);
    }

    if (method_exists($guard, 'setRequest')) {
        $guard->setRequest($app->refresh('request', $guard, 'setRequest'));
    }

    return $guard;
});

// config/auth.php

'guards' => [
    'web' => [
        'driver' => 'custom_guard', // 使用你注册的自定义 Guard
        'provider' => 'users',
    ],
],