Customized authentication with CPF and E-MAIL

Question

I’m thinking of a way to authenticate users using the email and the CPF of the same, so far not found a way to do, someone has a suggestion?

public function auth(Request $request) {
    $credenciais = $request->only('cli_email', 'cli_cpf');
}

Answer 1

The Laravel Framework, has a form of authentication with the instance of class User, it is then possible to check other relevant data for access to the system, following example:

$user = User::where('cpf', $cpf)->where('email', $email)->first();
if ($user) // se verdade existe um usuário com essas informações
{
    Auth::login($user); //efetuando a operação de autenticação
}

but, would not be a security breach?, because, it is easy to discover the CPF and the E-mail of some user, the password should also be informed by being a data of each user.