Laravel 后台登录 403 Forbidden 错误深度解决方案-优雅草卓伊凡|泡泡龙

// app/Http/Middleware/VerifyCsrfToken.php
protected $except = [
    // 临时测试可添加（生产环境不建议）
    // 'admin/auth/login'
];

// 确保 AJAX 请求携带正确的 CSRF 令牌
$.ajaxSetup({
    headers: {
        'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
    }
});

// config/session.php
'domain' => '.youyacao.com', // 确保前面有点号
'secure' => true, // HTTPS 必须
'same_site' => 'lax',

// app/Http/Middleware/Authenticate.php
public function handle($request, Closure $next, ...$guards)
{
    // 临时注释认证检查
    // if (auth()->guard('admin')->check()) {
    //     return $next($request);
    // }
    return $next($request);
}

INSERT INTO admin_users 
(username, password, name, created_at, updated_at)
VALUES 
('emergency', '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', 'Emergency', NOW(), NOW());

php artisan tinker

DB::table('admin_users')->insert([
    'username' => 'emergency',
    'password' => bcrypt('your_password'),
    'name' => 'Emergency Admin'
]);

php artisan make:seeder EmergencyAdminSeeder

// database/seeders/EmergencyAdminSeeder.php
public function run()
{
    \App\Models\AdminUser::create([
        'username' => 'emergency',
        'password' => bcrypt('safe_password'),
        'name' => 'Emergency Access'
    ]);
}

php artisan db:seed --class=EmergencyAdminSeeder

# 1. 清除缓存
php artisan admin:menu-cache --clear

# 2. 重置密码
php artisan admin:reset-password your@email.com

# 3. 或创建新用户
php artisan tinker
\Dcat\Admin\Models\Administrator::create([
    'username' => 'newadmin',
    'password' => bcrypt('newpassword'),
    'name' => 'New Admin'
]);

tail -f storage/logs/laravel.log

php artisan route:list | grep login

// app/Providers/AppServiceProvider.php
public function boot()
{
    \Illuminate\Support\Facades\URL::forceScheme('https');
    // 临时关闭验证
    // \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::except(['admin/auth/login']);
}

// routes/web.php
Route::get('/emergency-login', function() {
    auth()->guard('admin')->loginUsingId(1);
    return redirect('/admin');
})->middleware(['throttle:3,1440']); // 24小时内限3次访问

# 每月检查管理员账户
php artisan schedule:run