User Auth not persisting within Laravel package

Question

This is my first attempt at a laravel package and have run into an issue where Auth::attempt($credentials) works within my login controller, but upon redirection to a protected route or controller, the user is no longer authenticated. Below is my login controller method with the redirect to dashboard commented out.

public function attempt(Request $request){

    $email =  strtolower(strip_tags(htmlspecialchars($request->input('email'))));
    $password = strip_tags(htmlspecialchars($request->input('password')));

    if (Auth::attempt(array('email' => $email, 'password' => $password)))
    {
        // Redirect to dashboard route
        //return redirect()->intended('/admin');
        if(Auth::check())
            print_r(Auth::user());
    }
}

A response to valid credentials prints out the correct user record and Auth::check returns true. But, when redirected to the admin controller, the user is not authenticated. Below is the admin controller method that should output the authenticated user, but only returns "not logged".

public function index()
{
    if(Auth::check()) print_r(Auth::user());
    else echo "not logged";
}

Both controllers use Auth;, their namespaces are consistent with vendor/package/pathToDir, db is setup correctly, and the encryption key has been set. Any ideas on what's going wrong? Thanks

Will · Accepted Answer · 2016-02-14 18:00:46Z

27

Turns out the issue was with the new web middleware, moved all my routes that require session data in to the route group and everything works as normal.

Route::group(['middleware' => ['web']], function () {

    Route::get("/login", ['uses'=>'SiteLogin@index']);
    Route::post("/login", ['uses'=>'SiteLogin@attempt']);
    Route::get("/logout", ['uses'=>'SiteLogin@logout']);

    Route::group(['prefix' => 'admin', 'middleware' => 'auth'], function () {
        Route::get('/', ['uses'=>'Admin@index']);
    });
});

answered Feb 14, 2016 at 18:00

Will

3833 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Evgeniy Maynagashev Over a year ago

You saved my day! It turns out, for default routes within routes/web.php Laravel applies whole middleware group called "web". And doesn't apply this group to external package routes loaded via service provider's method $this->loadRoutesFrom(__DIR__.'/routes.php');

logikurl Over a year ago

Saved me a lot of time as I was trying to achieve somthing similar with my package, thanks :) How did you end up figuring this out/troubleshooting it? @Will

Laerte · Accepted Answer · 2016-02-13 18:59:26Z

0

The default behavior of the method attempt is to not keep the user logged.

You should change it to:

if (Auth::attempt(array('email' => $email, 'password' => $password), false, true))

This way you will set remember as false and login as true.

Check more about this here: https://laravel.com/docs/5.2/authentication

answered Feb 13, 2016 at 18:59

Laerte

7,0833 gold badges35 silver badges52 bronze badges

Collectives™ on Stack Overflow

User Auth not persisting within Laravel package

2 Answers 2

2 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related