Laravel API认证：实现用户状态等额外条件验证

public function login(Request $request)
{
    $credentials = request(['email', 'password']);

    if (! $token = auth()->attempt($credentials)) {
        return response()->json(['error' => 'Unauthorized'], 401);
    }

    return $this->respondWithToken($token, $request->email);
}

<?php

namespace App\Http\Controllers;

use App\Models\User; // 确保引入User模型
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Validator;
use Illuminate\Support\Facades\Auth; // 确保引入Auth门面

class AuthController extends Controller
{
    /**
     * Create a new AuthController instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('auth:api', ['except' => ['login', 'register']]);
    }

    /**
     * Register new user.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function register(Request $request){
        $validate = Validator::make($request->all(), [
            'name'      => 'required',
            'email'     => 'required|email|unique:users',
            'password'  => 'required|min:4|confirmed',
        ]);
        if ($validate->fails()){
            return response()->json([
                'status' => 'error',
                'errors' => $validate->errors()
            ], 422);
        }
        // 注册用户逻辑，此处略过，假设已正确实现
        // $user = new User;
        // $user->name = $request->name;
        // $user->email = $request->email;
        // $user->password = bcrypt($request->password);
        // $user->status = true; // 假设新注册用户状态为激活
        // $user->save();
        return response()->json(['status' => 'success'], 200);
    }

    /**
     * Get a JWT via given credentials, with status check.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function login(Request $request)
    {
        // 从请求中获取email和password
        $email = $request->input('email');
        $password = $request->input('password');

        // 构造包含额外条件的凭证数组，此处添加 'status' => 1
        // Auth::attempt 会将这些条件作为 WHERE 子句添加到数据库查询中
        if (! $token = Auth::attempt(['email' => $email, 'password' => $password, 'status' => 1])) {
            // 如果认证失败（包括email/password不匹配或status不为1），返回未授权错误
            return response()->json(['error' => 'Unauthorized'], 401);
        }

        // 如果认证成功，返回JWT token
        return $this->respondWithToken($token, $email);
    }

    /**
     * Log the user out (Invalidate the token).
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function logout()
    {
        auth()->logout();

        return response()->json(['message' => 'Successfully logged out']);
    }

    /**
     * Refresh a token.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function refresh()
    {
        return $this->respondWithToken(auth()->refresh());
    }

    /**
     * Get the token array structure.
     *
     * @param  string $token
     *
     * @return \Illuminate\Http\JsonResponse
     */
    protected function respondWithToken($token, $email)
    {
        // 假设User模型已正确关联并可查询menuroles
        $user = User::select('menuroles as roles')->where('email', '=', $email)->first();

        return response()->json([
            'access_token' => $token,
            'token_type' => 'bearer',
            'expires_in' => auth()->factory()->getTTL() * 60,
            'roles' => $user->roles // 确保用户存在且roles字段可访问
        ]);
    }
}