esalazarv/multiauth

Multiple auth driver for Laravel 5

Laravel Multi Auth

• Laravel: 5.1.11
• Author: Eduardo Salazar
• Author Homepage: https://github.com/esalazarv
• Author: Ramon Ackermann
• Author Homepage: https://github.com/sboo
• Author: Ollie Read
• Author Homepage: http://ollieread.com

For Laravel 5.1.0 version, see Branch https://github.com/esalazarv/multiauth/tree/L5.1.0 For Laravel 4.2 version, see https://github.com/ollieread/multiauth, _(*1)

IMPORTANT: Laravel 5.1 Default AuthController with its traits, _(*2)

\Illuminate\Foundation\Auth\AuthenticatesAndRegistersUsers

more specifically, _(*3)

Illuminate\Foundation\Auth\AuthenticatesUsers::postLogin()

This package is not a replacement for laravels default Auth library, but instead something that sits between your code and the library., _(*4)

Think of it as a factory class for Auth. Now, instead of having a single table/model to authenticate users against, you can now have multiple, and unlike the previous version of this package, you have access to all functions, and can even use a different driver for each user type., _(*5)

On top of that, you can use multiple authentication types, simultaneously, so you can be logged in as a user, a master account and an admin, without conflicts!, _(*6)

Installation

Firstly you want to include this package in your composer.json file., _(*7)

    "require": {
            "esalazarv/multiauth" : "5.0.*"
    }

Now you'll want to update or install via composer., _(*8)

composer update

Next you open up app/config/app.php and replace the 'Illuminate\Auth\AuthServiceProvider', with, _(*9)

    'Ollieread\Multiauth\MultiauthServiceProvider',

and 'Illuminate\Auth\Passwords\PasswordResetServiceProvider' with, _(*10)

    'Ollieread\Multiauth\Passwords\PasswordResetServiceProvider',

NOTE It is very important that you replace the default service providers., _(*11)

Remove the original database migration for password_resets., _(*12)

Configuration

is pretty easy too, take config/auth.php with its default values:, _(*13)

    return [

        'driver' => 'eloquent',

        'model' => 'App\User',

        'table' => 'users',

        'password' => [
                'email' => 'emails.password',
                'table' => 'password_resets',
                'expire' => 60,
            ],

    ];

Now remove the first three options (driver, model and table) and replace as follows (Custom authentication drivers now work):, _(*14)

    return [

        'multi' => [
            'admin' => [
                'driver' => 'eloquent',
                'model' => 'App\Admin',
            ],
            'client' => [
                'driver' => 'database',
                'table' => 'clients',
                'email' => 'client.emails.password',
            ],
            'other' => [
                'driver' => 'customDriver',
                'model' => 'App\Other',
            ],
        ],

        'password' => [
                'email' => 'emails.password',
                'table' => 'password_resets',
                'expire' => 60,
            ],

    ];

This is an example configuration. Note that you will have to create Models and migrations for each type of user. Use App\User.php and 2014_10_12_000000_create_users_table.php as an example., _(*15)

If you wish to use a reminders email view per usertype, simply add an email option to the type, as shown in the above example., _(*16)

To generate the reminders table you will need to run the following command., _(*17)

php artisan multiauth:resets-table

Likewise, if you want to clear all reminders, you have to run the following command., _(*18)

php artisan multiauth:clear-resets

You will also need to change the existing default Laravel 5 files to accommodate multiple auth and password types. Do as described in this gist:, _(*19)

https://gist.github.com/sboo/10943f39429b001dd9d0, _(*20)

Usage

Everything is done the exact same way as the original library, the one exception being that all method calls are prefixed with the key (account or user in the above examples) as a method itself., _(*21)

    Auth::admin()->attempt(array(
        'email'     => $attributes['email'],
        'password'  => $attributes['password'],
    ));
    Auth::client()->attempt(array(
        'email'     => $attributes['email'],
        'password'  => $attributes['password'],
    ));
    Auth::admin()->check();
    Auth::client()->check();

I found that have to call the user() method on a user type called user() looked messy, so I have added in a nice get method to wrap around it., _(*22)

    Auth::admin()->get();

But if you prefer, you can specify which type of user you will use to use method uses('YourUserType'), once this is done you can access the current user as the original Auth Facade , as easy as Auth::user()., _(*23)

This method sets 'admin' as the current user with which to work., _(*24)

    /** You can switch users as needed **/
    Auth::uses('admin');

Note: By default current user is the first in the config array., _(*25)

You can now access the user just as you would with the original Facade Auth., _(*26)

    /** Accessing the user using the 'user()' (original method) **/
    if(Auth::user()->check()){
        //
    }

    /** Accessing the user using the 'get()' (additional method)  **/
    if(Auth::get()->check()){
        //
    }

or using the descriptive methods that existed., _(*27)

    if(Auth::admin()->user()->check()){
        //
    }

    if(Auth::admin()->get()->check()){
        //
    }

In the instance where you have a user type that can impersonate another user type, example being an admin impersonating a user to recreate or check something, I added in an impersonate() method which simply wraps loginUsingId() on the request user type., _(*28)

    Auth::impersonate('client', 1, true);

or, _(*29)

    Auth::admin()->impersonate('client', 1, true);

The first argument is the user type, the second is the id of said user, and the third is whether or not to remember the user, which will default to false, so can be left out more often than not., _(*30)

And so on and so forth., _(*31)

Note: The method 'impersonate()' returns and sets the new user as the current user., _(*32)

You can Know if an user is impersonated, _(*33)

    /** @return boolean **/
    if(Auth::isImpersonated()){
        //
    }

or, _(*34)

You may know the key name impersonator of current user, _(*35)

    /** @return string | null **/
    Auth::getImpersonatorName();

or specifying, _(*36)

    /** @return string | null **/
    Auth::client()->getImpersonatorName();

There we go, done! Enjoy yourselves., _(*37)

Testing

Laravel integration/controller testing implements $this->be($user) to the base TestCase class. The implementation of #be() does not work correctly with Multiauth. To get around this, implement your own version of #be() as follows:, _(*38)

    public function authenticateAs($type, $user) {
      $this->app['auth']->$type()->setUser($user);
    }

License

This package inherits the licensing of its parent framework, Laravel, and as such is open-sourced software licensed under the MIT license, _(*39)