How to override auth login function in Laravel?

i think you don't need to re implement laravel auth, its just you need to understand it..

laravel uses attempt method to check user credentials like email , password

so in case, if you need to authenticate your user with phone and password..

just pass to attempt method array containing phone and password,

if you need to authenticate your user with email and password and only active users

just pass to attempt function email , password , active fields..

its so easy.. just read the documentation..

https://laravel.com/docs/5.6/authentication

You are correct I want to check for is_activated. I did this for now:

I copied the whole login function into LoginController.php and this is the interesting part

        if ($this->guard()->validate($this->credentials($request))) {
            $user = $this->guard()->getLastAttempted();
            if ($user->is_activated && $this->attemptLogin($request)) {
                return $this->sendLoginResponse($request);
            } else {
                $this->incrementLoginAttempts($request);
                if ($request->ajax()) {
                    return response()->json([
                        'error' => 'This account is not activated.'
                    ], 401);
                }
            }
        }

If I do it as you suggest, how can I also generate the error message as above only if is_activated is false on that particular user?

and how exactly do I tell attempt to also check the is_activated field

What would I put here inside attempt so it checks additional column for true or false?

        return $this->guard()->attempt(
            $this->credentials($request), $request->filled('remember')
        );

ok I see now, example is in the documentation. Thanks :)

@nikocraft you are welcome.. mark the answer as best reply, if its useful to you..

yes it was very usefull :) thanks!

Btw if anyone in future wonders what I did, here is how I solved it

I still had to override the login function inside LoginController.php this had to be done so I get all the throttling and error messages that can be generated by the system. Here is my final function

    public function login(Request $request)
    {
        $this->validateLogin($request);

        if ($this->hasTooManyLoginAttempts($request)) {
            $this->fireLockoutEvent($request);

            return $this->sendLockoutResponse($request);
        }

        if(Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_activated' => 1])) {
            // return redirect()->intended('dashboard');
        }  else {
            $this->incrementLoginAttempts($request);
            return response()->json([
                'error' => 'This account is not activated.'
            ], 401);
        }

        $this->incrementLoginAttempts($request);
        return $this->sendFailedLoginResponse($request);
    }

@BishoyWagih if you think it could have been even more simplified plz let me know :)

i see its good now..

Actually its good except we got another problem now.

If user credentials do not match what is found in the database now user will only get back "This account is not activated." error message, which may not be true since user can be activated but he typed wrong password. Any idea how to solve this problem? I have to show the user correct error message.

Ok this is final function if anyone from the future wonders what the solution was:

    public function login(Request $request)
    {
        $this->validateLogin($request);

        if ($this->hasTooManyLoginAttempts($request)) {
            $this->fireLockoutEvent($request);

            return $this->sendLockoutResponse($request);
        }

        if($this->guard()->validate($this->credentials($request))) {
            if(Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_activated' => 1])) {
                // return redirect()->intended('dashboard');
            }  else {
                $this->incrementLoginAttempts($request);
                return response()->json([
                    'error' => 'This account is not activated.'
                ], 401);
            }
        } else {
            // dd('ok');
            $this->incrementLoginAttempts($request);
            return response()->json([
                'error' => 'Credentials do not match our database.'
            ], 401);
        }
    }

this part validates the correct credentials but does not login the user:

 if($this->guard()->validate($this->credentials($request)))

this part logs-in the user if all requirments are met:

if(Auth::attempt(['email' => $request->email, 'password' => $request->password, 'is_activated' => 1])) 

if anyone from the future wonders what the solution was:

Hi, from year 2099, thanks very helpful

@jlrdw hi, how are things in the future, are Marty and Doc still around? Is everything ok with Earths gravity?

Funny, I couldn't resist the way you worded your reply about the future. Oh and the future all programming is done in the mind.

hey thx for this , yes it has helped me to build my login system , well im not that much in the future but 1 year later I guess I am.

Hi guys. I have some problem with auth. I have table Persons with columns (Person_Login, Person_Hash) and login.blade with fields Person_Login, password, but can't pass auth. My condition is

if(Auth::attempt(['Person_Login'=>$request->Person_Login, 'Person_Hash'=>$request->password]))

But it always false.

In documentation i find that i don't need to hash password field, but i can't understand how laravel know what field contains hash? I log queries to dabase and see that query is

select top 1 * from [Persons] where [Person_Login] = ? and [Person_Hash] = ?
array (
  0 => 'User',
  1 => 'Password',
)  

where is Hash of password?

When i registrate new user - everything is ok: creation and logging

would this be a valid option? $this->validate($request, [ 'email' => 'required|email', 'password' => 'required', ]);

    if ($this->auth->validate(['email' => $request->email, 'password' => $request->password, 'status' => 0])) {
        return redirect($this->loginPath())
            ->withInput($request->only('email', 'remember'))
            ->withErrors('Your account is Inactive or not verified');
    }

I input the code for my login form at https://tophomeworkexpert.com/