PHP應用
return [
 'defaults' => [
 'guard' => 'web',
 ...
 ],
 'guards' => [ 
 'web' => [
  'driver' => 'session',
  'provider' => 'users',
 ],
 'api' => [ 
  'driver' => 'token', 
  'provider' => 'users',
 ],
 ],
 'providers' => [
 'users' => [
  'driver' => 'eloquent',
  'model' => App\User::class,
 ], 
 ],
], 
];

PHP應用
// $credentials數組存放認證條件,比如郵箱或者用戶名、密碼
// $remember 表示是否要記住,生成 `remember_token`
public function attempt(array $credentials = [], $remember = false) 
 
public function login(AuthenticatableContract $user, $remember = false)
 
public function loginUsingId($id, $remember = false)

PHP應用
public function basic($field = 'email', $extraConditions = [])

PHP應用
public function once(array $credentials = [])
public function onceUsingId($id)
public function onceBasic($field = 'email', $extraConditions = [])

PHP應用
return [
 'defaults' => [
  'passwords' => 'users',
  ...
 ],
 
 'passwords' => [
  'users' => [
   'provider' => 'users',
   'table' => 'password_resets',
   'expire' => 60,
  ],
 ],
]

PHP應用
public function reset(array $credentials, Closure $callback) {
 // 驗證用戶名、密碼和 token 是否有效
 $user = $this->validateReset($credentials);
 if (! $user instanceof CanResetPasswordContract) {
   return $user;
 } 
 
 $password = $credentials['password'];
 // 回調函數執行修改密碼,及持久化存儲
 $callback($user, $password);
 // 刪除重置密碼時持久化存儲保存的 token
 $this->tokens->delete($user);
 return static::PASSWORD_RESET;
} 

PHP應用
// 暴露的重置密碼 API
public function reset(Request $request) {
 // 驗證請求參數 token、email、password、password_confirmation
 $this->validate($request, $this->rules(), $this->validationErrorMessages());
 // 調用重置密碼的方法,第二個參數是回調,做一些持久化存儲工作
 $response = $this->broker()->reset(
  $this->credentials($request), function ($user, $password) {
  $this->resetPassword($user, $password);
  }
 );
 // 封裝 Response
 return $response == Password::PASSWORD_RESET
  ? $this->sendResetResponse($response)
  : $this->sendResetFailedResponse($request, $response);
}
// 獲取重置密碼時的請求參數
protected function credentials(Request $request) {
 return $request->only(
  'email', 'password', 'password_confirmation', 'token'
 );
}
// 重置密碼的真實性驗證后,進行的持久化工作
protected function resetPassword($user, $password) {
 // 修改后的密碼、重新生成 remember_token
 $user->forceFill([
  'password' => bcrypt($password),
  'remember_token' => Str::random(60),
 ])->save();
 // session 中的用戶信息也進行重新賦值          
 $this->guard()->login($user);
} 

PHP應用
$abilities = array(
 '定義的動作名,比如以路由的 as 名(common.dashboard.list)' => function($user) {
  // 方法的參數,第一位是 $user, 當前 user, 后面的參數可以自行決定
  return true; // 返回 true 意味有權限, false 意味沒有權限
 },
 ......
);

PHP應用
class PostPolicy {
 // update 權限,文章作者才可以修改
 public function update(User $user, Post $post) {
  return $user->id === $post->user_id;
 }
}

PHP應用
protected $policies = [
 Post::class => PostPolicy::class,
];

PHP應用
$gate = app(\Illuminate\Contracts\Auth\Access\Gate::class);
$reflection_gate = new ReflectionClass($gate);
$policies = $reflection_gate->getProperty('policies');
$policies->setAccessible(true);
// 獲取當前注冊的 policies 數組
dump($policies->getValue($gate));
                          
$abilities = $reflection_gate->getProperty('abilities');          
$abilities->setAccessible(true);
// 獲取當前注冊的 abilities 數組
dump($abilities->getValue($gate));