laravel 登录功能(redis+token)

	/*
     * 登录
     * */
    public static function login($username,$password)
    {
    	//根据用户名获取用户信息
        $userInfo = User::where('username',$username)->first();
        if ($userInfo) {
        	//判断密码是否正确
            if ($userInfo->password == md5($password)) {
                $userToken = base64_encode($username.$password);
                $userTokenKey = "USER_TOKEN_STORE_KEY".$userToken;
                $tokenInfo = [
                    'user_id' => $userInfo->id,
                    'username' => $userInfo->username
                ];
                //用户信息存入redis,两小时内有效
                Redis::setex($userTokenKey, 3600*2, json_encode($tokenInfo, JSON_UNESCAPED_UNICODE));
                return ['code'=>0,'msg'=>'登录成功']];
            } else {
                return ['code'=>1,'msg'=>'登录失败,用户名或密码错误'];
            }
        } else {
            return ['code'=>1,'msg'=>'登录失败,用户名或密码错误'];
        }
    }

	/**
     * 通过中间件进行拦截
     */
    public function handle($request, Closure $next)
    {
        // 校验登录令牌
        $tokenString = (string)$request->header("access-token");

        if ($tokenString === "") {
            return response()->json(['code'=>1,'msg'=>'token不能为空']);
        }
        //判断token是否在缓存中
        $userTokenKey = RedisKey::USER_TOKEN_KEY.$tokenString;
        
        if (Redis::exists($userTokenKey)) {
            $tokenInfo = json_decode(Redis::get($userTokenKey), true);
        } else {
            return response()->json(['code'=>1,'msg'=>'token失效']);
        }
        
        if (!empty($tokenInfo)) {
        	//将用户信息存入中间件,方便以后使用
            $request->attributes->add([
                "user_id" => $tokenInfo['user_id'],
                "username" => $tokenInfo['username']
            ]);
            $arr = $this->preResponse($request->all());
            $request->merge($arr);//合并参数
            return $next($request);
        } else {
            return response()->json(['code'=>1,'msg'=>'token失效']);
        }
    }