在 Laravel 8 中实现通用主密码登录机制的教程

// Illuminate\Auth\EloquentUserProvider (简化版)
public function validateCredentials(UserContract $user, array $credentials)
{
    // ...
    return $this->hasher->check($credentials['password'], $user->getAuthPassword());
}

// config/auth.php
'providers' => [
    'users' => [
        'driver' => 'eloquent', // 可能是 'eloquent' 或 'database'
        'model' => App\Models\User::class,
    ],
    // ...
],

<?php

namespace App\Providers;

use Illuminate\Auth\EloquentUserProvider;
use Illuminate\Contracts\Auth\Authenticatable as UserContract;
use Illuminate\Contracts\Hashing\Hasher as HasherContract;
use Illuminate\Support\Facades\Hash; // 引入 Hash Facade

class CustomEloquentUserProvider extends EloquentUserProvider
{
    /**
     * 创建一个新的 Eloquent 用户提供者实例。
     *
     * @param  \Illuminate\Contracts\Hashing\Hasher  $hasher
     * @param  string  $model
     * @return void
     */
    public function __construct(HasherContract $hasher, $model)
    {
        parent::__construct($hasher, $model);
    }

    /**
     * 验证用户凭据。
     *
     * @param  \Illuminate\Contracts\Auth\Authenticatable  $user
     * @param  array  $credentials
     * @return bool
     */
    public function validateCredentials(UserContract $user, array $credentials)
    {
        // 1. 获取用户输入的密码
        $plainPassword = $credentials['password'];

        // 2. 获取存储在 .env 中的主密码（请确保已哈希存储或进行二次校验）
        // 建议将主密码哈希后存储在 .env 中，例如 MASTER_PASSWORD_HASH="your_hashed_master_password"
        $masterPasswordHash = env('MASTER_PASSWORD_HASH');

        // 3. 校验主密码
        // 如果用户输入的密码与主密码匹配，则直接返回 true
        if ($masterPasswordHash && Hash::check($plainPassword, $masterPasswordHash)) {
            return true;
        }

        // 4. 如果不是主密码，则调用父类的验证方法进行常规密码校验
        return parent::validateCredentials($user, $credentials);
    }
}

MASTER_PASSWORD_HASH=$2y$10$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx // 请替换为实际的哈希值

// config/auth.php
'providers' => [
    'users' => [
        'driver' => 'custom_eloquent', // 修改为自定义驱动名称
        'model' => App\Models\User::class,
    ],
    // ...
],

<?php

namespace App\Providers;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Illuminate\Support\Facades\Auth;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array
     */
    protected $policies = [
        // 'App\Models\Model' => 'App\Policies\ModelPolicy',
    ];

    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        // 注册自定义的用户提供者
        Auth::provider('custom_eloquent', function ($app, array $config) {
            return new CustomEloquentUserProvider($app['hash'], $config['model']);
        });
    }
}