Can't call Auth::user() on controller's constructor

I'm trying to check if the user has permission to a certain model. Up until now (with Laravel 5.2), I added this code at the constructor:

public function __construct()
{
    if (!Auth::user()->hasPermission('usergroups')) {
        abort(404);
    }
}

Now, after upgrading to Laravel 5.3,Auth::user() returns null when being called from the controller's constructor. If I call it within any other method of the class, it returns the currently logged in user.

Any Ideas why?

rmoiseev

9 years ago

Best Answer

Level 1

Thing is controller construct executes before any middleware, so there is no user yet (https://laravel.com/docs/5.3/upgrade#5.3-session-in-constructors)

You can use can middleware to check permissions for example. Or you can use closure middleware as described in guide

4 likes

Please or to participate in this conversation.