Level 6
I think this thread sheds some light: https://github.com/laravel/framework/issues/16311
1 like
Jan 22, 2017
7
Level 11
AuthenticateSession middleware
In the development branch of the laravel/laravel repository, I noticed that the AuthenticateSession middleware is added to the web stack (commented out). I've tried to understand what it's supposed to do, but the only thing I discovered is that the "remember me" checkbox no longer works when this middleware is enabled (done by ticking the checkbox, logging in, deleting the session cookie, and refreshing). Is that its intended purpose?
Level 50
@bastiaan89 I know it's an old thread but I thought that adding a more comprehensive resource about the AuthenticateSession middleware can be good for future reference: https://kfirba.me/blog/the-undocumented-authenticatesession-middleware-decoded
12 likes
Level 8
@kfirba I've shared your article on my Twitter, @mkarnicki . Thank you.
PS HAH I also updated my username here to match that of Twitter.
Level 50
@mkarnicki Thanks for sharing :). I'm glad you found it helpful!
1 like
Level 7
Thats a really useful article @kfirba Thank you very much.
Level 3
Hi, I know this is a late reply but I just happened to pass by and wanted to share this and see what you think about it
I tried to move these lines
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
from $middlewareGroups => $middleware in App/Http/kernal.php
and auth()->user() worked fine in the constructor. Is there any down side for moving these lines as stated above?
Level 3
Just a small note that AuthenticateSession is now partially documented here: https://laravel.com/docs/5.8/authentication#invalidating-sessions-on-other-devices
However @kfirba's article does a fantastic job of actually explaining it!
Please or to participate in this conversation.