Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds the
Validated
auth event. This event is fired after aUser
is retrieved from the User Provider and properly validated, but before theLogin
event and logic:This allows any package to intercede on the authentication after a successful attempt but before login logic. As you can see, the
Login
event is fired after all login logic is already executed.This allows to intercede into the authentication without having to retrieve the user two times. For example, we can now run complex logic and deny further authentication after the user is validated using a Listener:
This is handy, for example, when we need to filter what Users can continue to authenticate depending on a complex prerequisites (like a relation value, or an external API response, whatever) which we cannot set in the LoginController, and without having to edit the SessionGuard or macro it.
Please comment so I don't feel alone. Thanks.