Laravel Auth::attempt() 认证失败排查：密码哈希是关键

<?php

namespace App\Http\Controllers;

use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\Rule;

class RegisterController extends Controller
{
    /**
     * 处理用户注册请求。
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\RedirectResponse
     */
    public function register(Request $request)
    {
        // 验证用户输入
        $request->validate([
            'name' => ['required', 'string', 'max:255'],
            'email' => ['required', 'string', 'email', 'max:255', Rule::unique('users')],
            'password' => ['required', 'string', 'min:8', 'confirmed'], // 'confirmed' 要求有 password_confirmation 字段
        ]);

        // 创建用户并哈希密码
        $user = User::create([
            'name' => $request->name,
            'email' => $request->email,
            'password' => Hash::make($request->password), // 关键：使用 Hash::make() 哈希密码
        ]);

        // 自动登录新注册用户（可选）
        // Auth::login($user);

        return redirect('/dashboard')->with('success', '注册成功！');
    }
}

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Auth;

class ProfileController extends Controller
{
    /**
     * 更新当前用户的密码。
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\RedirectResponse
     */
    public function updatePassword(Request $request)
    {
        $request->validate([
            'current_password' => ['required', 'string'],
            'new_password' => ['required', 'string', 'min:8', 'confirmed'],
        ]);

        // 验证当前密码是否正确
        if (!Hash::check($request->current_password, Auth::user()->password)) {
            return back()->withErrors(['current_password' => '当前密码不正确。']);
        }

        // 更新密码并哈希
        Auth::user()->update([
            'password' => Hash::make($request->new_password),
        ]);

        return back()->with('success', '密码已成功更新！');
    }
}

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class LoginController extends Controller
{
    /**
     * 处理自定义登录请求。
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
     */
    public function customLogin(Request $request)
    {
        // 验证登录凭据
        $request->validate([
            'email' => 'required|email',
            'password' => 'required',
        ]);

        $credentials = $request->only('email', 'password');

        // 尝试认证用户
        if (Auth::attempt($credentials)) {
            // 认证成功
            $request->session()->regenerate(); // 重新生成会话ID，防止会话固定攻击
            return redirect()->intended('dashboard'); // 重定向到用户意图访问的页面或默认页面
        }

        // 认证失败
        return back()->withErrors([
            'email' => '提供的凭据与我们的记录不匹配。',
        ])->onlyInput('email'); // 只保留邮箱输入
    }
}