laravel-5

Authentication 146
However, you may use middleware to verify that the user is authenticated before allowing the user
access to certain routes / controllers. To learn more about this, check out the documentation on
protecting routes.
Protecting Routes
Route middleware can be used to allow only authenticated users to access a given route. Laravel
ships with the auth middleware, which is defined in app\Http\Middleware\Authenticate.php. All
you need to do is attach the middleware to a route definition:
.
1 // Using A Route Closure...
2
3 Route::get('profile', ['middleware' => 'auth', function() {
4 // Only authenticated users may enter...
5 }]);
6
7 // Using A Controller...
8
9 Route::get('profile', [
10 'middleware' => 'auth',
11 'uses' => 'ProfileController@show'
12 ]);
Of course, if you are using controller classes, you may call the middleware method from the
controller’s constructor instead of attaching it in the route definition directly:
.
1 public function __construct()
2 {
3 $this->middleware('auth');
4 }
Authentication Throttling
If you are using Laravel’s built-in AuthController class, the Illuminate\Foundation\Auth\ThrottlesLogins
trait may be used to throttle login attempts to your application. By default, the user will not be able
to login for one minute if they fail to provide the correct credentials after several attempts. The
throttling is unique to the user’s username / e-mail address and their IP address: