laralog/app/Models/User.php

<?php

declare(strict_types=1);


namespace App\Models;

use Database\Factories\UserFactory;
use Filament\Models\Contracts\FilamentUser;
use Filament\Panel;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Relations\HasMany;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Laravel\Sanctum\HasApiTokens;
use Illuminate\Support\Facades\Hash;
use Spatie\Permission\Traits\HasRoles;

class User extends Authenticatable implements FilamentUser
{
    /** @use HasFactory<UserFactory> */
    use HasFactory, Notifiable, HasRoles, HasApiTokens;

    public function canAccessPanel(Panel $panel): bool
    {
        return $this->canAccessAdmin();
    }

    public function canAccessAdmin(): bool
    {
        return $this->hasRole(['admin', 'editor']);
    }

    /**
     * The attributes that are mass assignable.
     *
     * @var list<string>
     */
    protected $fillable = [
        'name',
        'email',
        'password',
        'legacy_md5',
        'url',
        'logincount',
        'loginip',
        'regip',
        'logintime',
        'lastpost_at',
    ];

    /**
     * The attributes that should be hidden for serialization.
     *
     * @var list<string>
     */
    protected $hidden = [
        'password',
        'remember_token',
        'legacy_md5',
    ];

    /**
     * Get the attributes that should be cast.
     *
     * @return array<string, string>
     */
    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
            'logintime' => 'datetime',
            'lastpost_at' => 'datetime',
        ];
    }

    public function posts(): HasMany
    {
        return $this->hasMany(Post::class);
    }

    public function comments(): HasMany
    {
        return $this->hasMany(Comment::class);
    }

    /**
     * 验证登录：优先新密码哈希，兼容 sablog 老 MD5 密码。
     */
    public function verifyPassword(string $plain): bool
    {
        if ($this->password && Hash::check($plain, $this->password)) {
            return true;
        }

        if ($this->legacy_md5 && md5($plain) === strtolower($this->legacy_md5)) {
            // 登录成功后自动升级为现代哈希
            $this->password = Hash::make($plain);
            $this->legacy_md5 = null;
            $this->save();

            return true;
        }

        return false;
    }

    public function isAdmin(): bool
    {
        return $this->hasRole('admin');
    }
}