laravel+ldap进行auth用户登录认证

古城微笑少年丶 2023-02-13 11:52 2阅读 0赞

*  上一篇：[laravel+ldap统一用户登录连接][laravel_ldap]里面介绍了怎样在laravel里面配置连接到ldap服务器，但是还是没有解决我们在laravel中Auth的登录认证系统
 *  拓展包提供的方式是直接使用ldap作为auth认证的驱动去进行认证，我这里未能调通，资料也少，还未解决。
 *  这里我改写auth的login方法，手动进行ldap认证，再本地生成用户，继续使用本地用户认证

# 拓展提供方法（未调通） #

*  我项目是php5.6 使用:[拓展包提供方法][Link 1]
 *  快速生成laravel auth登录认证基础框架（需本地先创建数据库，并配置连接）

> php artisan migrate

*  配置 ldap auth config/app.php

> Adldap\\Laravel\\AdldapServiceProvider::class,  
> Adldap\\Laravel\\AdldapAuthServiceProvider::class,

> ‘Adldap’ => Adldap\\Laravel\\Facades\\Adldap::class,

*  生成auth

> php artisan make:auth

*  找到app/Http/Controllers/Auth/LoginController.php文件修改登录名

public function username()
    { 
        return 'username';
    }

*  找到config/auth.php文件修改认证驱动

'providers' => [
        'users' => [
            'driver' => 'adldap', // Was 'eloquent'.
            'model'  => App\User::class,
        ],
    ],

*  找到登录模板页面将默认的邮箱登录修改为用户名登录

> 这个方法比价直接，但是我使用上述方法未能实现

# 手动ldap认证 #

*  我们通过拓展包已经成功连接上了ldap服务器，我们使用拓展包提供的方法进行ldap的相关操作
 *  ldap用户查询

$search = Adldap::search()->where('cn', '=', 'test')->get();

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzY3NDExMw_size_16_color_FFFFFF_t_70]

*  ldap用户认证，使用用户查询里面的`dn`字段查询,用户密码匹配成功返回`true`失败`false`

$tt = Adldap::auth()->attempt('cn=test,cn=Users,dc=xxxx,dc=xxxx', '123456');

![在这里插入图片描述][20200529102513925.png]

*  到这里我们的ldap用户登录验证就已经成功了，我们需要改写app/Http/Controllers/Auth/LoginController.php的login方法
 *  将登录的默认登录改为name登录，登录模板也改为name

public function username()
        { 
            return 'name';
        }

*  将`AuthenticatesUsers`中的login方法拷贝到app/Http/Controllers/Auth/LoginController.php中进行改写

public function login(Request $request)
        { 
            $search = Adldap::search()->where('cn', '=', $request->name)->get();
            $user = User::where('name',$request->name)->first();
            if ($user){ 
                $user->password=bcrypt(uniqid());//随机刷新本地密码
                $user->save();
            }
            if (count($search)>0){ 
                       $is_login = Adldap::auth()->attempt($search[0]->dn, $request->password);
            }else{ 
                $is_login=false;
            }
            if ($is_login){ //ldap验证成功，本地创建账户或更新密码
                $data=[
                    'name' => $request->name,
                    'email' => '123@qq.com',
                    'password' => bcrypt($request->password),
                ];
                if ($user){ 
                    $user->password=bcrypt($request->password);
                    $user->save();
                }else{ 
                    User::create($data);
                }
    
            }
            //Auth自带本地数据库用户认证代码
            $this->validateLogin($request);
    
            // If the class is using the ThrottlesLogins trait, we can automatically throttle
            // the login attempts for this application. We'll key this by the username and
            // the IP address of the client making these requests into this application.
            if ($this->hasTooManyLoginAttempts($request)) { 
                $this->fireLockoutEvent($request);
    
                return $this->sendLockoutResponse($request);
            }
    
            if ($this->attemptLogin($request)) { 
                return $this->sendLoginResponse($request);
            }
    
            // If the login attempt was unsuccessful we will increment the number of attempts
            // to login and redirect the user back to the login form. Of course, when this
            // user surpasses their maximum number of attempts they will get locked out.
            $this->incrementLoginAttempts($request);
    
            return $this->sendFailedLoginResponse($request);
        }

[laravel_ldap]: https://blog.csdn.net/weixin_43674113/article/details/106403814
[Link 1]: https://github.com/superkingM/Adldap2-Laravel/blob/v3.0/docs/quick-start.md
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzY3NDExMw_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200529102247458.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzY3NDExMw==,size_16,color_FFFFFF,t_70
[20200529102513925.png]: https://img-blog.csdnimg.cn/20200529102513925.png