Laravel 8两套注册表单对应不同角色登录跳转独立仪表板方案咨询

1. 补全现有注册存储逻辑 #

你当前的两个注册控制器仅做了表单校验，需补充数据存储逻辑，且密码需做哈希加密：

• 首先要将两个角色对应的模型改为可认证模型，继承Laravel原生的Authenticatable类：

// App/Models/Individual.php 个人用户模型
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable;
class Individual extends Authenticatable
{
    protected $fillable = ['firstname','lastname','username','email','phone','city','state','zip','password'];
    protected $hidden = ['password','remember_token'];
}

// App/Models/Business.php 企业用户模型
namespace App\Models;
use Illuminate\Foundation\Auth\User as Authenticatable;
class Business extends Authenticatable
{
    protected $fillable = ['businessname','firstname','lastname','username','businessemail','phone','address','city','state','zip','website','industry','password'];
    protected $hidden = ['password','remember_token'];
}

• 补全注册控制器的store方法逻辑，以个人注册为例：

// RegisterIndividualController 校验完成后补充
$validated = $request->validated();
$user = \App\Models\Individual::create(array_merge(
    $validated,
    ['password' => \Illuminate\Support\Facades\Hash::make($validated['password'])]
));
// 注册后可直接登录跳转对应仪表板，也可跳转登录页
auth()->guard('individual')->login($user);
return redirect()->route('individual.dashboard');

企业注册控制器逻辑同理，替换模型和守卫即可。

2. 配置多用户守卫（Guard） #

直接使用Laravel原生多守卫机制实现多角色认证，是官方推荐的最优方案，无需引入第三方扩展。
修改config/auth.php配置文件：

// 新增两个角色的守卫
'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],
    // 个人用户守卫
    'individual' => [
        'driver' => 'session',
        'provider' => 'individuals',
    ],
    // 企业用户守卫
    'business' => [
        'driver' => 'session',
        'provider' => 'businesses',
    ],
],
// 新增两个角色的用户提供者
'providers' => [
    'users' => [
        'driver' => 'eloquent',
        'model' => App\Models\User::class,
    ],
    'individuals' => [
        'driver' => 'eloquent',
        'model' => App\Models\Individual::class,
    ],
    'businesses' => [
        'driver' => 'eloquent',
        'model' => App\Models\Business::class,
    ],
],

3. 实现登录逻辑 #

3.1 新增登录相关路由 #

在web.php中补充：

// 登录页面
Route::get('/login', [\App\Http\Controllers\Auth\LoginController::class, 'index'])->name('login');
// 登录提交
Route::post('/login', [\App\Http\Controllers\Auth\LoginController::class, 'store']);
// 两个角色的独立仪表板，绑定对应守卫中间件做访问控制
Route::get('/individual/dashboard', function () {
    return view('dashboard.individual');
})->name('individual.dashboard')->middleware('auth:individual');
Route::get('/business/dashboard', function () {
    return view('dashboard.business');
})->name('business.dashboard')->middleware('auth:business');
// 退出登录
Route::post('/logout', [\App\Http\Controllers\Auth\LoginController::class, 'logout'])->name('logout');

3.2 编写登录控制器 #

新建app/Http/Controllers/Auth/LoginController.php：

<?php
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Auth;

class LoginController extends Controller
{
    public function index()
    {
        return view('auth.login');
    }

    public function store(Request $request)
    {
        // 登录表单可新增角色选择字段，也可根据账号自动判断所属角色
        $credentials = $request->validate([
            'username' => 'required',
            'password' => 'required',
            'role' => 'required|in:individual,business'
        ]);
        $role = $credentials['role'];
        unset($credentials['role']);
        
        // 对应守卫尝试登录
        if (Auth::guard($role)->attempt($credentials, $request->filled('remember'))) {
            $request->session()->regenerate();
            // 登录成功自动跳转对应角色的仪表板
            return redirect()->intended(route("{$role}.dashboard"));
        }

        return back()->withErrors([
            'username' => '账号或密码错误，请重新输入',
        ])->onlyInput('username','role');
    }

    public function logout(Request $request)
    {
        // 退出当前登录的守卫
        $activeGuard = Auth::guard('individual')->check() ? 'individual' : 'business';
        Auth::guard($activeGuard)->logout();
        $request->session()->invalidate();
        $request->session()->regenerateToken();
        return redirect('/login');
    }
}

4. 其他注意事项 #

• 两个用户表的username、邮箱字段建议加唯一索引，避免重复注册
• 其他业务路由可通过auth:individual、auth:business中间件做访问隔离，避免跨角色越权访问
• 如不需要在登录页选择角色，可在登录逻辑中先分别查询两个用户表判断账号所属角色，再调用对应守卫登录即可

内容的提问来源于stack exchange，提问作者Ginz77