Combining session and token guard in Laravel 5.2 for simultaneous route access

Question

Combining session and token guard in Laravel 5.2 for simultaneous route access

We previously used session guard for authorization and found it sufficient.

Now, we are in need of adding authorization through tokens (either in headers or GET parameters) while still using session authorization on the same routes.

The token-based authorization must be stateless.

UPDATE: Initially, we considered creating duplicate routes - one for session authorization and another for token authorization.

// API token authentication
// URL: /api/test
Route::group(['middleware' => ['web', 'auth:api'], 'prefix' => 'api', 'as' => 'api.'], function () {
    Route::resource('test', 'TestController');
    // 50+ routes
});

// Session authentication
// URL: /test
Route::group(['middleware' => ['web', 'auth']], function () {
    Route::resource('test', 'TestController');
    // 50+ routes
});

However, this approach did not meet our requirements as the URLs were different.

Is there anyone with a solution to address this issue?

php api laravel laravel-5 authorization

Answer 1

Answer №1

Introducing a new middleware named AuthenticateWithToken:

class AuthenticateWithToken
{
    /**
     * Manage an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     *
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if (($user = Auth::guard('api')->user())) {
            Auth::setUser($user);
        }

        return $next($request);
    }
}

Add the declaration in Http/Kernel.php:

/**
 * The application's route middleware.
 *
 * These middlewares can be grouped or used individually.
 *
 * @var array
 */
protected $routeMiddleware = [
    // ...
    'auth.api' => \App\Http\Middleware\AuthenticateWithToken::class,
    // ...
];

Also include it before the default 'auth' middleware in routes.php:

Route::group(['middleware' => ['web', 'auth.api', 'auth']], function () {
    Route::resource('test', 'TestController');
    // More than 50 routes
});

Answer 2

Introducing a new middleware named AuthenticateWithToken:

class AuthenticateWithToken
{
    /**
     * Manage an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     *
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if (($user = Auth::guard('api')->user())) {
            Auth::setUser($user);
        }

        return $next($request);
    }
}

Add the declaration in Http/Kernel.php:

/**
 * The application's route middleware.
 *
 * These middlewares can be grouped or used individually.
 *
 * @var array
 */
protected $routeMiddleware = [
    // ...
    'auth.api' => \App\Http\Middleware\AuthenticateWithToken::class,
    // ...
];

Also include it before the default 'auth' middleware in routes.php:

Route::group(['middleware' => ['web', 'auth.api', 'auth']], function () {
    Route::resource('test', 'TestController');
    // More than 50 routes
});

Combining session and token guard in Laravel 5.2 for simultaneous route access

Answer №1

Similar questions

The Vuejs component I created is failing to display on my Blade View

What is the best way to create a MySQL query using the JSON data provided?

Utilizing the SELECT last_insert_id method for generating distinct and sequential identifiers

Utilizing AJAX and jQuery to dynamically load a div instantly, followed by automatic refreshing at set intervals

Querying a MySQL database using PDO

In PHP, we divide a number by 10 and then increase the result by 1 if it is greater than

The Laravel background-image:url function is yielding a result of 1

Building Pagination Feature in Node.JS and Express using SWAPI and Axios

When searching for Arabic letters in PHP MySQL, the results may not always be displayed due to their different shapes

The PHP content form is malfunctioning and not processing email submissions properly, resulting in the PHP code being

Easy PHP navigation options

Is there a way I can obtain the code for a message box?

Leveraging the routing functionality provided by Laravel exclusively

Selecting Content Dynamically with jQuery

Issue with Jquery firing function during onunload event

The semantic UI search functionality is malfunctioning

Tips for creating a PHP cURL request using the provided documentation

Running Javascript based on the output of PHP code

Increment the text counter following the uploading of an image file with html format

I am looking to eliminate the double quotation marks from a JSON file so that I can properly utilize