Laravel多认证中Customer Guard登录后无法获取用户信息问题

问题描述 #

项目采用Laravel多认证机制，Admin认证功能正常，但Customer认证存在异常：登录时Auth::guard('customer')->attempt()验证通过并跳转至dashboard页面，但在dashboard方法中调用Auth::guard('customer')->user()无法获取用户详情。

相关代码 #

登录控制器代码 #

$credential = [
    'customer_mobile' => $request->customer_mobile,
    'password' => $request->password,
    'customer_status' => 1
];
if(Auth::guard('customer')->attempt($credential)){
    //dd(Auth::guard()->user());
    //dd('login');  
    return redirect()->route('dashboard');
}else{
    //dd('not login'); 
    return redirect()->route('login')->with('error', 'invalid credential');
}

Dashboard方法代码 #

public function dashboard(){
    dd(Auth::guard('customer')->user());
    return view('dashboard');
}

auth.php配置 #

'guards' => [
    'web' => [
        'driver' => 'session',
        'provider' => 'users',
    ],
    'admin' => [
        'driver' => 'session',
        'provider' => 'admins',
    ],
    'customer' => [
        'driver' => 'session',
        'provider' => 'customers',
    ],
],

'providers' => [
    'users' => [
        'driver' => 'eloquent',
        'model' => App\Models\User::class,
    ],
    'admins' => [
        'driver' => 'eloquent',
        'model' => App\Models\Admin::class,
    ],
    'customers' => [
        'driver' => 'eloquent',
        'model' => App\Models\Customer::class,
    ],

    // 'users' => [
    //     'driver' => 'database',
    //     'table' => 'users',
    // ],
],


'passwords' => [
    'users' => [
        'provider' => 'users',
        'table' => 'password_reset_tokens',
        'expire' => 60,
        'throttle' => 60,
    ],
    'admins' => [
        'provider' => 'admins',
        'table' => 'password_reset_tokens',
        'expire' => 60,
        'throttle' => 60,
    ],
    'customers' => [
        'provider' => 'customers',
        'table' => 'password_reset_tokens',
        'expire' => 60,
        'throttle' => 60,
    ],
],

排查方向 #

1. 检查Customer模型配置 #

• 确认模型是否指定了正确的主键：如果Customer表主键不是id，需手动设置protected $primaryKey = '你的主键字段名';
• 验证认证字段映射：若密码字段不是默认的password，需在模型中重写getAuthPassword()方法，示例：

  public function getAuthPassword()
  {
      return $this->customer_password; // 替换为实际密码字段名
  }
  

• 可在模型中指定默认guard：protected $guard = 'customer';，减少guard切换的潜在问题

2. 验证Session与路由中间件 #

• 检查dashboard路由是否绑定了auth:customer中间件，确保session在路由访问时被正确加载，示例路由配置：

  Route::middleware('auth:customer')->group(function () {
      Route::get('/dashboard', [CustomerController::class, 'dashboard'])->name('dashboard');
  });
  

• 检查config/session.php中的domain和path配置，避免因跨域或路径错误导致session无法携带

3. 排查Attempt方法与跳转过程 #

• 在attempt()验证通过后立即打印用户实例，确认登录时已正确写入session：

  if(Auth::guard('customer')->attempt($credential)){
      dd(Auth::guard('customer')->user()); // 此处若能输出，说明问题出在跳转环节
      return redirect()->route('dashboard');
  }
  

• 确认customer_status是数据库中真实存在的字段，且对应用户的该字段值确实为1

4. 清除缓存与配置重载 #

• 执行以下命令清除缓存，避免旧配置影响：

  php artisan cache:clear
  php artisan config:clear
  php artisan session:clear
  

• 检查session驱动（config/session.php的driver项），若使用redis等外部存储，确认服务正常运行

内容的提问来源于stack exchange，提问作者vishal panara