Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

fabioselau077's avatar

Laravel broadcasting/auth returning 403 FORBIDDEN

Hello, I'm configuring laravel with self hosted pusher (soketi), everything works for public channels. However, when it is a private channel (private-), the call is made to site.com/api/broadcasting/auth, but 403 is always returned.

Analyzing the Laravel source code and debugging ( https:// prnt .sc/JlUUq0DvyRxk), I verified a check in the PusherBroadcaster auth function that tries to retrieve the user() within retrieveUser(), but as I use JWT I don't have "$request->user()", after passing through the middleware 'verify.jwt' and I verify the JWT, I decrypt it in Bearer and I add it to $request->credentials (https:// prnt .sc/lOL0gFz3Lwrf).

I believe this is where the problem lies, even though we don't say to use any middleware or anything like that, it always waits for $request->user() because it has 'private-' in the channel name.

Any solution?

Sorry for the spaces in the link, as this is my first post, I can't add a direct link

0 likes
0 replies

Please or to participate in this conversation.