Laravel API authentication middleware

Question

I have some issues with Laravel authentication middleware. Because I want this middleware to run every time, I have created new middleware and added it to $middlewareGroups in API. My middleware looks like this:

if ($request->path() === 'api/auth/signin' OR 'api/canLogin' OR 'api/check') {
    return $next($request);
}
 elseif (!Auth::check()){
    return response()->json(['response' => false, 'status' => 403, 'message' => 'Not Authenticated'], 403);
}

Strange was that first time that actually worked (I don't know how), but now it doesn't. It always redirects me to public.html (because I don't have a login view).

I know that the easy way is to add that middleware to every protected route, but I want it to run every time. My routes uses auth middleware anyway (like so Route::group(['middleware' => ['auth:api']] ), if I delete this middleware it gives me same index.html

why you created a new middleware instead of using laravel one? — Giacomo M
– Giacomo M, Commented Dec 14, 2020 at 8:31

JemoeE · Accepted Answer · 2020-12-14 09:00:53Z

2

OR doesnt work like that. Your IF will always return TRUE because it's a non empty string. It will result if (($request->path() === "string") OR (true) OR (true))

Instead you can use in_array($request->path(), ["path1", "path2", "etc"])

answered Dec 14, 2020 at 9:00

JemoeE

6002 gold badges6 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Kamlesh Paul · Accepted Answer · 2020-12-14 09:02:59Z

2

don't use middleware overwired default unauthenticated exception

in Exceptions/Handler.php add this lines

use Illuminate\Auth\AuthenticationException;




protected function unauthenticated($request, AuthenticationException $exception)
{
    return $request->expectsJson()
        ? response()->json(['response' => false, 'status' => 403, 'message' => 'Not Authenticated'], 403)
        : redirect('/login');
}

this is much better way to handel

answered Dec 14, 2020 at 9:02

Kamlesh Paul

12.5k2 gold badges23 silver badges36 bronze badges

1 Comment

Rade Ilijev Over a year ago

Maybe but I still have same respond

Collectives™ on Stack Overflow

Laravel API authentication middleware

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related