Login and logout in Laravel - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to log in a user using Laravel's Auth facade.

Laravel

if (Auth::[1](['email' => $email, 'password' => $password])) {
    // User is logged in
}

Drag options to blanks, or click blank then click option'

Alogout

Bcheck

Clogin

Dattempt

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'login' instead of 'attempt' will cause errors.

Using 'check' only checks if user is logged in.

The attempt method tries to log in a user with given credentials.

2fill in blank

medium

Complete the code to log out the current user in Laravel.

Laravel

Auth::[1]();

Drag options to blanks, or click blank then click option'

Aattempt

Blogout

Ccheck

Duser

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'attempt' tries to log in, not log out.

Using 'check' only checks login status.

The logout method logs out the current authenticated user.

3fill in blank

hard

Fix the error in the middleware to ensure only guests can access the login page.

Laravel

public function handle($request, Closure $next)
{
    if (!Auth::[1]()) {
        return redirect('/home');
    }
    return $next($request);
}

Drag options to blanks, or click blank then click option'

Aguest

Blogout

Ccheck

Duser

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'check' returns true if user is logged in, opposite of needed.

Using 'logout' here is incorrect.

The guest method returns true if the user is not logged in, allowing guest-only access.

4fill in blank

hard

Fill both blanks to create a route group that requires authentication and logs out users.

Laravel

Route::middleware('[1]')->group(function () {
    Route::post('/logout', [LoginController::class, '[2]']);
});

Drag options to blanks, or click blank then click option'

Aauth

Blogin

Clogout

Dguest

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'guest' middleware allows only guests, not logged-in users.

Using 'login' method does not log out users.

The auth middleware restricts routes to logged-in users, and the logout method logs out the user.

5fill in blank

hard

Fill all three blanks to create a login controller method that validates input, attempts login, and redirects.

Laravel

public function login(Request $request)
{
    $credentials = $request->validate([[1] => ['required', 'email'], [2] => ['required']]);

    if (Auth::[3]($credentials)) {
        return redirect()->intended('/dashboard');
    }

    return back()->withErrors(['email' => 'Invalid credentials.']);
}

Drag options to blanks, or click blank then click option'

A'email'

B'password'

Cattempt

Dcheck

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'check' instead of 'attempt' will not log in the user.

Swapping 'email' and 'password' keys causes validation errors.

The validate method checks for 'email' and 'password' fields. The attempt method tries to log in with those credentials.

Practice

1. What does the Auth::attempt() method do in Laravel's login process?

easy

A. It registers a new user in the database.

B. It logs out the user and clears the session.

C. It checks user credentials and starts a session if valid.

D. It sends a password reset email to the user.

Solution

1. Step 1: Understand Auth::attempt() purpose

   This method tries to verify the user's email and password against stored data.

2. Step 2: Recognize session start on success

   If credentials are correct, Laravel starts a session to keep the user logged in.

3. Final Answer:

   It checks user credentials and starts a session if valid. -> Option C

4. Quick Check:

   Auth::attempt() = Check credentials + start session [OK]

Hint: Auth::attempt() means login check and session start [OK]

Common Mistakes:

• Confusing Auth::attempt() with logout method
• Thinking it registers new users
• Assuming it sends emails

2. Which of the following is the correct syntax to log out a user in Laravel?

easy

A. Auth::logout();

B. Auth::end();

C. Auth::exit();

D. Auth::close();

Solution

1. Step 1: Identify Laravel logout method

   The correct method to log out a user is Auth::logout().

2. Step 2: Check other options for validity

   Methods like end(), exit(), and close() do not exist in Laravel's Auth facade.

3. Final Answer:

   Auth::logout(); -> Option A

4. Quick Check:

   Logout method = Auth::logout() [OK]

Hint: Logout always uses Auth::logout() in Laravel [OK]

Common Mistakes:

• Using non-existent methods like Auth::end()
• Confusing logout with session destroy
• Forgetting parentheses after logout

3. Given this Laravel controller code, what will return Auth::check(); output after a successful login?

medium

A. true

B. false

C. null

D. Throws an error

Solution

1. Step 1: Understand Auth::check() function

   This method returns true if a user is currently logged in (session active).

2. Step 2: Consider successful login state

   After a successful login, the session is active, so Auth::check() returns true.

3. Final Answer:

   true -> Option A

4. Quick Check:

   Auth::check() after login = true [OK]

Hint: Auth::check() tells if user is logged in [OK]

Common Mistakes:

• Thinking it returns user data instead of boolean
• Assuming it returns false after login
• Expecting null or error

4. Identify the error in this Laravel logout code snippet:

public function logout() {
    Auth::logout;
    return redirect('/login');
}

medium

A. Redirect URL is incorrect

B. Missing parentheses after Auth::logout

C. logout method should be called on user model

D. No error, code is correct

Solution

1. Step 1: Check method call syntax

   Methods in PHP require parentheses even if no arguments are passed. Auth::logout misses parentheses.

2. Step 2: Validate redirect URL and method usage

   The redirect URL '/login' is valid and logout is correctly called on Auth facade, so no issues there.

3. Final Answer:

   Missing parentheses after Auth::logout -> Option B

4. Quick Check:

   Method calls need () in PHP [OK]

Hint: Always add () when calling methods in PHP [OK]

Common Mistakes:

• Forgetting parentheses on method calls
• Thinking redirect URL causes error
• Calling logout on wrong object

5. You want to protect a route so only logged-in users can access it and redirect guests to login. Which Laravel middleware should you use?

hard

A. guest

B. throttle

C. verified

D. auth

Solution

1. Step 1: Understand middleware roles

   The auth middleware allows only authenticated users to access routes.

2. Step 2: Compare other middleware

   guest redirects logged-in users away, verified checks email verification, and throttle limits request rate.

3. Final Answer:

   auth -> Option D

4. Quick Check:

   Protect routes for logged-in users = auth middleware [OK]

Hint: Use auth middleware to restrict routes to logged-in users [OK]

Common Mistakes:

• Using guest middleware which blocks logged-in users
• Confusing verified with auth
• Thinking throttle controls login access