Ignore Global scopes for Auth

Hm, can you explain a little more how your global scope works and why is it global and not a local scope for the users or profile model?

I applied a Privacy Trait to the User model in order to filter all users that do not have a public profile through the app.

public function apply(Builder $builder, Model $model)
    {
    $builder->where('privacy', 'public');
    }

I don't want to apply this as a local scope as this is used every time on every query.

The issue is that users with a private profile are not able to login as the query won't return them. I'm looking for a way to apply (withoutGlobalScopes()) to the query that retrieves the User when authenticating.

Well, you could implement a user provider that extends the base EloquentUserProvider and then override the methods you need to remove that global scope.

class CustomUserProvider extends EloquentUserProvider
{
    public function retrieveById($identifier)
    {
        return $this->createModel()->newQuery()->withoutGlobalScopes()->find($identifier);
    }
}

I only did one as an example, but that is the basic idea. To activate it for use you have to take a little trip to the AuthServiceProvider.

Auth::provider('custom', function ($app, $config) {
    return new CustomUserProvider($app['hash'], $config['model']);
});

Then you have to change your auth config.

'providers' => [
    'users' => [
        'driver' => 'custom',
        'model' => App\User::class,
    ],
]

Perhaps it would be better and easier to create another User model, maybe calling it PublicUser where you apply this global scope and use that in your project.

$users = PublicUser::where('foo', 'bar')->get();

You could leave the default User be used for the authentication.

@SaeedPrez Love that idea! Nice and simple.

@craigpaul Thanks. This is exactly what I was looking for.

@SaeedPrez I thought about this but I don't want to handle multiple User models through the App. Implementing a custom User Provider doesn't require any code change elsewhere.

Is there a way to check if auth has run without checking if there is a user logged in?