Add account activations

Author: summerblue

app/Http/Controllers/SessionsController.php

@@ -36,8 +36,14 @@ public function store(Request $request)
        ];
 
        if (Auth::attempt($credentials, $request->has('remember'))) {
-           session()->flash('success', '欢迎回来！');
-           return redirect()->intended(route('users.show', [Auth::user()]));
+           if(Auth::user()->activated) {
+               session()->flash('success', '欢迎回来！');
+               return redirect()->intended(route('users.show', [Auth::user()]));
+           } else {
+               Auth::logout();
+               session()->flash('warning', '你的账号未激活，请检查邮箱中的注册邮件进行激活。');
+               return redirect('/');
+           }
        } else {
            session()->flash('danger', '很抱歉，您的邮箱和密码不匹配');
            return redirect()->back();

app/Http/Controllers/UsersController.php

@@ -10,6 +10,7 @@
 use App\Models\User;
 
 use Auth;
+use Mail;
 
 class UsersController extends Controller
 {
@@ -55,9 +56,9 @@ public function store(Request $request)
             'password' => $request->password,
         ]);
 
-        Auth::login($user);
-        session()->flash('success', '欢迎，您将在这里开启一段新的旅程~');
-        return redirect()->route('users.show', [$user]);
+        $this->sendEmailConfirmationTo($user);
+        session()->flash('success', '验证邮件已发送到你的注册邮箱上，请注意查收。');
+        return redirect('/');
     }
 
     public function edit($id)
@@ -96,4 +97,31 @@ public function destroy($id)
         session()->flash('success', '成功删除用户！');
         return back();
     }
+
+    protected function sendEmailConfirmationTo($user)
+    {
+        $view = 'emails.confirm';
+        $data = compact('user');
+        $from = '[email protected]';
+        $name = 'Aufree';
+        $to = $user->email;
+        $subject = "感谢注册 Sample 应用！请确认你的邮箱。";
+
+        Mail::send($view, $data, function ($message) use ($from, $name, $to, $subject) {
+            $message->from($from, $name)->to($to)->subject($subject);
+        });
+    }
+
+    public function confirmEmail($token)
+    {
+        $user = User::where('activation_token', $token)->firstOrFail();
+
+        $user->activated = true;
+        $user->activation_token = null;
+        $user->save();
+
+        Auth::login($user);
+        session()->flash('success', '恭喜你，激活成功！');
+        return redirect()->route('users.show', [$user]);
+    }
 }

app/Http/routes.php

@@ -10,3 +10,5 @@
 get('login', 'SessionsController@create')->name('login');
 post('login', 'SessionsController@store')->name('login');
 delete('logout', 'SessionsController@destroy')->name('logout');
+
+get('signup/confirm/{token}', 'UsersController@confirmEmail')->name('confirm_email');

app/Models/User.php

@@ -35,7 +35,16 @@ class User extends Model implements AuthenticatableContract,
      *
      * @var array
      */
-    protected $hidden = ['password', 'remember_token'];
+     protected $hidden = ['password', 'remember_token'];
+
+     public static function boot()
+     {
+         parent::boot();
+
+         static::creating(function ($user) {
+             $user->activation_token = str_random(30);
+         });
+     }
 
     public function gravatar($size = '100')
     {

database/factories/ModelFactory.php

@@ -17,6 +17,7 @@
         'name' => $faker->name,
         'email' => $faker->safeEmail,
         'is_admin' => false,
+        'activated' => true,
         'password' => str_random(10),
         'remember_token' => str_random(10),
         'created_at' => $date_time,

database/migrations/2016_12_17_122826_add_activation_to_users_table.php

@@ -0,0 +1,33 @@
+<?php
+
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Database\Migrations\Migration;
+
+class AddActivationToUsersTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->string('activation_token')->nullable();
+            $table->boolean('activated')->default(false);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->dropColumn('activation_token');
+            $table->dropColumn('activated');
+        });
+    }
+}

database/seeds/UsersTableSeeder.php

@@ -20,6 +20,7 @@ public function run()
         $user->email = '[email protected]';
         $user->password = 'password';
         $user->is_admin = true;
+        $user->activated = true;
         $user->save();
     }
 }

resources/views/emails/confirm.blade.php

@@ -0,0 +1,21 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="UTF-8">
+  <title>注册确认链接</title>
+</head>
+<body>
+  <h1>感谢您在 Sample 网站进行注册！</h1>
+
+  <p>
+    请点击下面的链接完成注册：
+    <a href="{{ route('confirm_email', $user->activation_token) }}">
+      {{ route('confirm_email', $user->activation_token) }}
+    </a>
+  </p>
+
+  <p>
+    如果这不是您本人的操作，请忽略此邮件。
+  </p>
+</body>
+</html>