how to add validation to login in laravel/fortify

hi, how can i add some validation to login in laravel/fortify

i want to add recaptcha validation to my login form. i add below codes to FortifyServiceProvider in provider directory.

Fortify::authenticateUsing(function (Request $request) {
            $request->validate([
                'g-recaptcha-response' => [new GoogleRecaptcha]
            ]);
    $user = User::where('email', $request->email)->orWhere('username', $request->email)->first();
            if ($user &&  Hash::check($request->password, $user->password)) {
                return $user;
            }
        });

but always it validation fails in login . I'm sure about the rule that i made , i test it in register and other forms

LaryAI

2 years ago

Level 58

The issue with the provided code is that the validation is being performed before the user credentials are checked. This means that if the validation fails, the user credentials will not even be checked. To fix this, the validation should be performed after the user credentials are checked. Here's an updated version of the code:

Fortify::authenticateUsing(function (Request $request) {
    $user = User::where('email', $request->email)->orWhere('username', $request->email)->first();
    if ($user && Hash::check($request->password, $user->password)) {
        $request->validate([
            'g-recaptcha-response' => [new GoogleRecaptcha]
        ]);
        return $user;
    }
});

In this version, the user credentials are checked first, and if they are valid, then the recaptcha validation is performed.

iWpress

2 years ago

Level 1

Hello @wizard2000, for me, as a beginner, this is a very interesting question. Did you do what Lary "Quickdraw" A.I. suggested and can you tell us more? You added this code to the boot method of the FortifyServiceProvider before this code:

       RateLimiter::for('login', function (Request $request) {
        $throttleKey = Str::transliterate(Str::lower($request->input(Fortify::username())).'|'.$request->ip());

        return Limit::perMinute(5)->by($throttleKey);
    });

martinbean

2 years ago

Level 80

@iWpress The Laravel docs has a section detailing how you can customise the authentication process if you wanted to add additional checks such as a CAPTCHA: https://laravel.com/docs/10.x/fortify#customizing-user-authentication

iWpress

2 years ago

Level 1

@martinbean Thank you, I'll read it again. Sorry for the stupid question.

simran_11

1 year ago

Level 1

There is still problem , the authenticateUsing runs twice.

Please or to participate in this conversation.