$captcha = new Captcha();
$captcha->show(); // 显示验证码

use Illuminate\Http\Request;

class LoginThrottle implements Middleware
{
    public function handle(Request $request, Closure $next)
    {
        $throttle = Throttle::visit('login' . $request->ip());

        return $throttle->allowed()
            ? $next($request) // 允许访问
            : $throttle->errorResponse(); // 返回错误响应
    }
}

bcrypt('password'); // 使用 bcrypt 哈希算法的密码

config(['session.lifetime' => 60 * 15]); // 设置会话超时为 15 分钟

// 用户登录
$credentials = [
    'username' => $request->username,
    'password' => $request->password
];

if (!Auth::attempt($credentials)) {
    // 登录失败
}

// 用户登录
$captcha = new Captcha();
$captcha->show();

$credentials = [
    'username' => $request->username,
    'password' => bcrypt($request->password)
];

if (!Auth::attempt($credentials)) {
    // 登录失败
    Throttle::hit('login' . $request->ip());
}