Don't allow soft-deleted users to login

[adamwathan]

Don't allow soft-deleted users to login

[lequy1010]

@lextoc
You should override method login of AuthenticatesUsers
In Auth\LoginController you add a function login as below

public function login(Request $request)
    {
        if(Auth::attempt([
            'email' => $request->get('email'),
            'password' => $request->get('password')
        ])){
           // Login success and get user's info to check
            if (\auth()->user()->deleted_at != null){
               // Put your code in case use has been soft deleted
             }
        } else {
           // Login fail
   }

[adamwathan]

Ah yeah, you probably want to make sure you delete the record in the oauth_identities table that maps to the use after you soft delete them :/ I'm sure I can make this easier, will see what I can do.

[lextoc]

I'm using soft delete to sort of ban (and unban) users. I believe that if I delete the record in oauth_identities I can't track the user back and he will be able to create a new account and log in again.

I will use a banned field in my users table for now :)

Thanks for the reply.

[adamwathan]

Closing because this package is no longer actively maintained; for changes, fixes, or new features, please fork.