Problem with login in Laravel 5.3

Question

I have a project that consists of an administration.

What I’m doing is logging in, I already created the table and entered a password user in the mode Hash of Laravel.

I have the system that apparently works, what happens is that when I try to log in the always wrong data error and I’m putting in the right data username and password that I created in the table.

You can help me figure out the problem?

Controller

namespace App\Http\Controllers\admin;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use App\User;
use DB;
use Auth;
use Redirect;
use Hash;
use Illuminate\Support\Facades\Input;

class LoginController extends Controller
{
    public function showLogin ()
    {
        if (Auth::check()) {
            return Redirect::to('/admin');
        }
        return view('admin/login');
    } 

    public function postLogin()
    {
        $data = [
            'username' => Input::get('username'),
            'passwd' => Input::get('password')
        ];

        if (Auth::attempt($data)) {
            return Redirect::intended('admin');
        }

        return Redirect::back()->with('error_message', 'Dados Incorrectos')->withInput();
    }

    public function logOut()
    {
        Auth::logout();
        return Redirect::to('admin/login')->with('error_message', 'Logged out correctly');
    }
}

Answer 1

This is the standard code for authentication documentation, Realize it’s the countryside email and password, in your case you’re using another field, that’s the problem.

if (Auth::attempt(['email' => $email, 'password' => $password])) {
     // Authentication passed...
     return redirect()->intended('dashboard');
}

This is the basic mode, but there is a mode by user instance, example:

public function postLogin()
{

    $username = Input::get('username');
    $passwd   = Input::get('password');

    $user = User::where('username', $username)
        ->first();

    if ($user && Hash::check($passwd, $user->passwd))
    {
        Auth::login($user);
        return Redirect::intended('admin');     
    }

    return Redirect::back()->with('error_message', 'Dados Incorrectos')->withInput();
}

is also a valid way. The second way is to seek the User across the countryside username, if returned a user, check if the password matches the Hash::check and if you went through all this use the instance of that class Auth::login($user) to authenticate, and this works similar to the first but first does all this transparently to the developer with their particular fields.

^References:

• Authentication
• Manually Authenticating Users - Other Authentication Methods
• Hashing

Answer 2

Are you comparing to string NO hash with hash string.

$data = [
  'username' => Input::get('username'),
  'passwd' => Input::get('password')
];

Use with the Hash:

$data = [
  'username' => Input::get('username'),
  'passwd' => Hash::make(Input::get('password'))
];