Laravel CMS | N-10 | Login and Authentication

Key Takeaways

this video is sponsored by design eBook design Evo is a platform that allow you to creating three custom logos from a plethora of love templates for free like more than four thousand templates are available on the platform you can create your own logo for any company you like to create new projects or your own small team as a startup you have a lot of design projects you can design or you can design your own logo from scratch with a really really nice colorful logos and icons with also a nice font size and a font families all you have to do sign up it's very easy interface straight for the sign up email and password and you are actually ready to go designing your logo is as simple as dragging and dropping icons while also searching them ask a senior you can create an ice-cream logo as simple as that only the from like a lot of icons in here we drag-and-drop we click we choose which icon we want we give it like a text and from the text we can choose which color from like very cool color palettes you can choose the size and you can choose which fonts you really like from a lot of lot of lot of funds you can choose it from a custom font also you can choose the the plethora of funds how you can size your text with a custom sizes and a custom font sizes or font families you can also go ahead and just put in custom shapes for your logo like a circles to make the logo looks a little bit better and you can design it with a little bit more text samples and you know as you can see with more text templates so also you can go ahead and with a classic text and Chaz choose from the font families it has a lot of things for a lot of layers you can choose backgrounds and layout from here and yeah it gives you a lot of things you can preview that you can save it to the cloud if you have like a Dropbox or something or you can download it here for free if you really need to like only low resolution files or you can choose the basic or the plus plans for downloading and max resolution files with a all those supportive things type in design evil all the link will be description below and you can find a plethora of things or you can just go ahead and start making your logo from scratch make sure to check it out swimming in description come on guys welcome to a new tutorial on the series of making a constant value system using level so we've stopped the last video tutorial after adding the unfinished illustration the controller and the page that takes care of adding a new argument to the database where this is it's all probably gonna do is use those ant means and like make them eligible for authentication which means I'm going to just make our CMS is only authentic able like he would give it give him a long here for him whatever someone we don't know who wants to access the CMS or the constant management system platform he can't practice that until he injures his admin credentials so whenever he just trying to go to the category around for the a garage or whatever just gonna restrict him and redirect him to the login page so he can enjoy his more gain credentials in order to logging if it's not long then he can't access that whatsoever so it's only specific for admins so we'll just go ahead and do that I'm gonna need to create a couple of things in here but before starting with that I have done a couple of changes to the admin so the admin only needs to work in that particular case so if you take a look on the admin more go in here with us working last time you just can see there's a plenty of changes in here but not that much what I've done is just according to major classes is the authentic able class and the multi variable class from the aluminate notifiable and the foundation of a user I'm going to just use other to cable used as a usual but you really prefer using an awesome cable we extend from that why we do that because the adding is going to be like legible for working in between is eligible for authentication so you need to extend from that rather than extending from a normal mortal class or the base model class here in nature to use the modifiable and you protect protected fields in here so fillable which means which fields are going to be filled in here since we have the fields of the password email name into the admin page also the harder fuels which gonna be like hiding a lot of we're going to take care of the many mobile attacks and just try to hide that from an unauthorized users so put in here the password of the remember token if you have anything remember talking insist you're not going to use the remember token and obviously the table okay you make sure to change drawers if you're really intended to do a bit locking system when you're consum enter system issue to change that into here and everything should pretty much works fine right now so here we're going to need to change one other thing is the class itself or the database table so you can go ahead into the liberal CMS and go to the admin table and here I've changes something which is the password so this field was named hash password now it's named password for like an oven schema reasons as well literal only allow password and hash password if you wanted to use the admin table as an authentic Abel table so make sure to change from the hash password is the password to be simple just change now go to the migration is changing there and everything should be like fine and here make sure to change this one answer and everything should pretty much we're fine right now so here I might just go ahead and do increase and you control that gonna take care of Andi or controlling the admin so here that's going to need to open up the terminal and we're going to get a couple of things so let me just clearly use the peace be honest and I'm gonna make controller I'm gonna name it admin login controller okay I'm just gonna make it like that not going to make a new resource or something because it can have like a minimal methods for that just two or three methods they're gonna do the job for us perfectly let me just go ahead and close that and go in here and as you can see I've got admin control and here what I need is to move it to the off older since it's not the place for the authentication it can take a look under the off folder here you can see there's a we just a controller working it over and plenty of other things so those are default by level you can use the default level working system but probably wanted here's to making advanced or full use of the mobile education system you so you can create yours customized education sister here what's doing so make sure to go ahead and move that into the off if you want to which recommended will recommend this thing to do and I should put me now actually I'm gonna need to do a couple of things in here so there is still miss to extend from the controller and you're gonna be like the main login controller okay we're gonna have need a couple of things so the first one is going to be the public I can structure so we need the constructs okay we need the constructs method in here which is the gift structure and I'd be cold once the this controller class gonna be initiated this is the first method gonna be cold so you should be familiar with object-oriented programming especially PHP is a bit different than the other languages if you're already filled with the C or C++ so yeah super most pretty much see it doesn't have that far yeah you've got a point actually so we ever gotten Vance and pretty much yeah I'm totally forgotten about a function here so a function in here okay yep it would go so that we construct function and we're gonna need two more functions which is the index or going to be put a function and that's going to be the main index function I'm gonna have another one which is going to be authentic a function and this obviously is function gonna take credentials where the conditionals are an associative array of the user because you'd like the username and the password in and then the email and the last thing we are going to need this actually the function and the main long do you think which is to give me back the main method I'll gonna submit the body to which takes your requests so put in requests here we go we've got that so this do you like the function that we need is the media index page that we're gonna need and so on and so forth so here many too unlike include a couple of things in here as well so we'll just go ahead and use we're going to use luminance bro / HTTP you don't want to just go and copy that since I've already be my put it in dirty doesn't really matter that much so we just want to like win a bit of time in here not me through the video what's not much at the line I make sure to do that also they also think you need to change the namespace this one because this control is is no longer like flipping in Turkey like HTTP controllers it's now under its control those then the auth older so make sure to update that in order to make everything works fine unless it's going to give you a really really weird error so make sure to the namespace near then you can use the older to other things and use the up control will use the authentic et user which is like the base 28 class and we have the floor toast login if you really intended to use the throttles of an extra disorders why not and that has your functions and there's parsec request and they off the main on think it's gonna be responsible for after to Casey and a year's room so weird so this is all we're gonna need for the dance no we need some kind of a configuration for our authentication to works fine so liberal ships with a default configuration or anything or for anyone to be used by the default login system but if you want to use it while you're only need to create your own configurator so go ahead and enter the content file and do the main up folder and go into the auth dot PHP which is responsible to the authentication now here go down to the providers and we need to add in your providers I'm going to name its admins this is like an associative array it takes agree and I'd be like a driver with drug you're gonna use for that is Alec once just the same one as the users first you can see this one with once there were ships we had so like a default combination as I've said and a model is gonna be the app forward slash will use your not user actually gonna use the admin class in here so you give it the class that like responsible for taking care of the admin table so which is the our admin dot PHP here where I'm gonna give it and this is all of it now under the cards also need to create a new car I'm just mean an awning guard and she's gonna give it away so the guard is going to like responsible for a middle way so all talked about the middle range second actually you need to choose that in a session because our token is going to be x coordinates and in the session if you're not familiar with tokens please make sure to go ahead and check how about education basically words like theoretically how authentication works behind the scenes how application can authenticate a user to the servers and vice versa so yeah how everything actually works before coming back in here and knowing everything well of that and here we need to put in administer and here we go so this is all we're going to need to for the configuration make sure to put in here the the right things as I've given here I have this you pretty much we're applying query sensation you're not using token sessions means once the user has been wanting is not going to need to send the be token again with any other requests only once and once we're over token each time each request the token each prisons and do the request headers you know as I've said make sure to go ahead and check the other things or check that before coming up in here because it's a little bit more advanced to explain in this video tutorial and we don't have that much of time to do that so here we've got a snow into the constructor what we need is to use the middle room so we can call this don't middle with the middle we're gonna give it is under the admin so into the on education admin and we're gonna put the or here we're not gonna put the office actually begins and now we need to return the main index page of the long e so remember us we have to put in the login page if you can go ahead and do our templates it's actually under the pages then a subfolder off then we find login don't play dopey what I've created this all just organizing how many things a bit that this is like the end of this folder all of them are related to the authentication which is the monkeying you can here added some like although registration anything regardless to the like authentication system is going to be like the Tom planes are going to be under this sub the of Oldham so to access that it's actually very simple we use the same method so we say pages thoughts we say ours and remember that little bow instead of using slashes it replaces everything with thoughts so they either say or /and lordy doublet of HP please simply say dots marking and as you know we don't use the play dot PHP so simple like that we use at the index or page and this is all we need to do it with the index actually each index page go back and test everything in here and a sort of category we can go to the login and make sure it's like the up set up the routes correctly in here if you go back to the web top HP and as you can see it around both of them under the control of index and the login page for the the post request I'm gonna have issue from the forum so here let's see we've got this really nice long be important here make sure to do that make sure to make sure that everything is working fine empathy but submit or for the authentication for the on me I'm going to use it three folds we're gonna use username email and then password so you can use like two fields only on like most people don't when those the authentication system worse is only the username and password are needed for authenticating me he usually admin but since here is like it we have the constant management system and accessing a college dimensional system is a little bit more as instead of and it tells a little bit more since it appears sort of protecting everything to make it a little bit more secure like we go one step forward we have added the email email on education as well so we need to provide the email as well as the username also in the password so we can log in into the dashboard so just for like security reasons that's why we have included it so here let's just go ahead and validate form and this is all going to do for the more gatorman but this one is responsible for receiving the post requests only before me so any here's the best the holiday function so as we have we were using that for a couple of times for now so yeah this is like a very very simple thing since we have like three goals the user name email and password so we can pass that through here so the first one is going to do it required email so email is going to be quite as well and what the email whatever actually provide us is another functionality of an email and like you can check whether or not this isn't about email I'm just like let's say or someone trying to enter into the email field trying to enter only mail outs like and it's not about email address it is going to return an error and telling him to enter about email address so that you use like first flush and you put in their email so yeah this is how we'll check in words and the last thing he needs but it is a password password and we say we say required okay simple so this organized or the validation now the next thing we need to do is create the credentials associative array that you're not responsible for holding our DNA on the request so in each craziness or service for all of the our our like admin credentials in that very delicate check if this admin conditioners are involved or not on the database of course so for therefore here we're gonna put our usually is going to be first the second thing is going to be email email password your password okay make sure yeah but like any other fuels and they'll the long game for some reason make sure to put them in this was also great because it's very important which I can the admin credentials in your no particular me pradesh rules like liberal has a blue team function for doing that you keep it just only the credentials for social typically it takes that event is gonna give to the database it's it's the password and try to hash it in like holiday to do that we don't word or the real administrator reduce your password in the database if it is valid just going to which were true it's not valid it's an arbitrator force so this is a function so we need to exist it returns a boolean true all we need and yet stay tuned to check if that is true or not so there only need use the odds class and the big card function under the guard function exists we already used in the onion court and here it has like a functional code but all the dates and the ball details the credentials that we have created the second parameter it takes is the actual email remember or a be actual logging honorable patch okay so let's say that under your phone network is in here we don't have like a language okay since we want like the security to be very high don't wants you like remember anything for greater one login duration or something like remember the monkey session for more than three days or like I know a week or something you can use that you give it a botany when you're gonna really ticks ass whenever the ugly chicks that is just going to do a login for a week or something yeah you're going to cover that next to the story how you can but just do all that kind of things but for now focus on this you can add that up obviously fingertip documentation doing by yourself it's really simple as for now we're gonna have that I'm just gonna enter a false and that's it so this other side gonna return true true means that we have under the appliance admin validation credentials so we are good to go and being like means that the success means by the admin has the advice credentials and here in axis the after all - okay it can access the actual control management system so here for therefore we need to advance kitchen or avant again we use this function that is going to do everyone's going to do or what our education is all about is actually just gonna change the ugly credentials create a specific course a unique token from that commercials a hash to open a real only hash that totally takes it they put it into it cookies only be a user session so enjoyed the odd musician but every day long tonight it takes over there and put it in hand that put it into the cookies on this particular session and whatever like he wants to log in again and under this same session we don't like cross session or nocturia not this PT or something the same session we don't like really long term relationship time between multiple sessions so the same session is you can just view more without typing years we don't shoot like otto warmbier so if this is one nearby session to learn more about sessions like sydney sessions and how everything actually works and how everything is signed up so this is pretty much we've done so let's go ahead and create this authentication function here there are we need to grab the admin credentials first noticing a specific question on the Bill Chandler also use the off guard give it the ugly and here we need to get the provider so remember that we have like a sign of the finder whenever we were using or creating like authentication calibration so again a team to get the provider is the next thing is actually getting me to yeah which we have cried credentials okay you all ready to retrieve my credentials is actually in the credentials itself so the thing that's worth asking as an argument earlier so we just do that and here we go here which is gonna give us the argument itself just going to return the admin model here all the information we've columns us to be happy and we just didn't like return or we need to order to keep us also we need to use a function or not in which the court and we say add me and it has a function called login which going to do all the authentication created its opening and put it pretty the cookie into the session and all what that differently it's going to become like this function for us so all we need to do is just pass the argument and the second thing with person B remember to insist we are not using that for the moment just going to pass in a course and everything is going to be working too much final so we have milked these functions are the first name offensive kids and they should you used s we need to pull this and we call offensive and so we call this function passing in the credentials that we have just created up there the second thing now all we need to do is just create a session to again what come back for something so for that session let me just go ahead and copy dance to just make it a little bit faster for us here okay so you're going to do like a crazy session sell anything we'll come back to I mean all of me fast Frances he has successfully adjusted to be country's manager system I'm just going to attempt to the logical index since we don't have a dashboard page I'm sorry the dashboard page is from our CMS well this membership particular category means that's the category now you can clearly see the category and you can edit not actually in the admin oh and you are successfully a wall again and you'll see and that's so everything should be working fine no else what you need in you if he hasn't actually registered successfully or if the credentials are wrong all we need to do just return and error so we return Mike we go back like Beneke means go to this like the back link the last thing has me something good so when you just give him a little bit of input for justice Oh which one I found a request and the only thing we don't want to be put in the password puts me in email as well and we can be so I just for letting the usual giving it a little bit more better user experience in here so that means he doesn't have like ants and actually and so we need to put it give me another thing you just gonna like here's the web and here we're gonna give them an error to like I mean let me just open so just going to tell him I mean asked we will email or password and cracks just to make it a little bit secured and here the error by the way any storms capitalism and everything should be much working fine in here as you can see near all the lawyer stuff now to restrict the army phone access all the pages that say restriction for now if you keep just typing in your county boy you can easily so easily go ahead and access the category you can easily access the Anthony page how we can actually restrict him whenever he hits the convoy unused he is not actually more idiots I want this to redirect him to the login page and tell me you must login first in order to proceed as he or like to the key control admin or the admin control panel so to do that we need introduced the middle wall and assuming the world not used in here and there the other controls we want to control so here you can go to remember the account morning controller under the constructor of make sure to put in here a constructor if you haven't already you just pretended me to learn is putting a guest this means anybody can see that route I want is to put it off which means only authenticated acnes or all the authenticated users can see the shrubs claim can actually access this resource from the server so here we try to save that go bang refresh never liked County Board against Casey it clearly redirects us into the forest last morning simply you can see here it just really basic thing another try to access the county going down we just cannot get into the mortgage if you want to do this for the admin let's say the advent of PHP you need to also go ahead and delete controller into the construct function or construct method putting you in the middle world and everything should be working pretty much right with you so now I try to rule I go ahead and authenticate the user sees we're not creating user whole system with this that's me calm like an email Bri you know what you're three four five six Thank You warning in here and waiting a little bit seconds and as you see the strobe coming here and must be nest nasur requests so yeah the ball would eat okay under the bottom function you know like actually putting in a request it's my bad having passed there's arguments to this function so when you just going to do it very quickly here we need to passing the request goes to the power base method in the true web point no to actually be able to validate our credentials from the code form submit here just your hand and ask a see clearly we can login into our account in the competitive category name not be trying to go head into the log in it actually got a lot of us and just movie directors or this Helen which is nothing to find you can go to the party and you can just change the helmet put it into the category alter now it's working pretty much fine and here's the authentication you have a void authentication system is not that much opening advanced classification system in the next unit owners we're going to talk more on how you can make it a little bit more better and secure and make it a little bit more advanced you control it from all the way around so we have lower structure very basic just so we know how authentic Asian system works behind the scenes up and wearable and yet everything is tied up together and how will you set up everything and the log in control or stuff like that so I think that's what watching will really hope it drove with you guys