Reputation: 3
i've a problem with middleware in laravel.I wanted to make an middleware that would allow just registered users sign in. And 'yes' i know that i could get that by 'php artisan make:auth' but i wanted to make my own middleware. if i type in url '/dashboard' it redirects me to dashboard what is really bad and also works for signing in
So i wrote middleware:
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Support\Facades\Auth;
class AuthUser
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if(Auth::guard()->guest()) {
return redirect()->route('home');
}
return $next($request);
}
}
Then added it to routes in kernel.php:
'auth_user'=>\App\Http\Middleware\AuthUser::class
Here are my routes:
Route::get('/', function () {
return view('welcome');
})->name('home');
Route::post('/signup',[
'uses'=>'UserController@postSignUp',
'as'=>'signup'
]);
Route::post('/signin',[
'uses' =>'UserController@postSignIn',
'as' =>'signin'
]);
Route::group(['middleware'=>['auth_user']],function (){
Route::get('/dashboard',[
'uses' => 'UserController@getDashboard',
'as' => 'dashboard',
]);
});
And my UserController:
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\User;
use Illuminate\Support\Facades\Auth;
class UserController extends Controller
{
public function getDashboard()
{
return view('dashboard');
}
public function postSignUp(Request $request)
{
$this->validate($request,[
'email' => 'email|unique:users',
'first_name'=> 'required|max:128',
'password' => 'required|min:6'
]);
$email=$request['email'];
$password=bcrypt($request['password']);
$first_name=$request['first_name'];
$surname=($request['surname']);
$user=new User();
$user->email=$email;
$user->password=$password;
$user->first_name=$first_name;
$user->surname=$surname;
$user->save();
Auth::login($user);
return redirect()->route('dashboard');
}
public function postSignIn(Request $request)
{
$this->validate($request,[
'email' => 'required|email',
'password' => 'required|min:6'
]);
if(Auth::attempt(['email' => $request['email'], 'password'
=>$request['password']]))
{
return redirect()->route('dashboard');
}
return redirect()->back();
}
}
Upvotes: 0
Views: 1384
Reputation: 409
You don't need to have the 'web' middleware when defining routes in routes/web.php.
It's applied to routes/web.php routes through your RoutingServiceProvider by default
Route::group(['middleware'=>['auth_user']],function (){
Route::get('/dashboard',[
'uses' => 'UserController@getDashboard',
'as' => 'dashboard',
]);
});
Upvotes: 1