Using Spatie Permission package with Livewire

Most probably you don't add middleare in Kernel as explained here in docs https://spatie.be/docs/laravel-permission/v3/basic-usage/middleware right?

Yes, you are right.

but when you coming to protect the controllers, there is no method called middleware in livewire components

Seem that Liveware are using Gate Policies, see https://laravel.com/docs/7.x/authorization#creating-policies

I am not sure, but seem that you can't add middleware to a lireware route, I can see only here global middleware:

https://laravel-livewire.com/docs/2.x/file-uploads#global-middleware

@oussamasid this is my solution , a BaseComponent with custom implementation. you can also implements just a trait instead

<?php

namespace App\Http\Livewire;

use App\Models\User;
use Livewire\Component;
use Spatie\Permission\Exceptions\UnauthorizedException;

abstract class BaseComponent extends Component
{

    /** override per usare spatie */
    public function authorize($roleOrPermission)
    {
        /** @var User $user */

        //check logged
        $user = auth()->user();
        if (! $user ) {
            throw UnauthorizedException::notLoggedIn();
        }

        //check rule or pemission (like spatie middleware  i.e. "admin|edit posts")
        $rolesOrPermissions = is_array($roleOrPermission)
            ? $roleOrPermission
            : explode('|', $roleOrPermission);

        if (! $user->hasAnyRole($rolesOrPermissions) && ! $user->hasAnyPermission($rolesOrPermissions)) {
            throw UnauthorizedException::forRolesOrPermissions($rolesOrPermissions);
        }
    }

    public function render()
    {
        return '';
    }
}

I resolved whit the middleware on the route

Route::middleware(['role:superadmin|admin'])->get('/clients',Clients::class)->name('clients');

Hello, I'm so late... but, I got a method to protect the livewire component inside Spatie Permissions...

I did take the spatie trait code, and made a little changes

<?php


namespace App\Traits\Admin;

use Illuminate\Support\Facades\Auth;
use Spatie\Permission\Exceptions\UnauthorizedException;

trait RoleOrPermissionSpatie
{
    public function handlePermission($roleOrPermission)
    {
        $authGuard = Auth::guard();
        if ($authGuard->guest()) {
            throw UnauthorizedException::notLoggedIn();
        }

        $rolesOrPermissions = is_array($roleOrPermission)
            ? $roleOrPermission
            : explode('|', $roleOrPermission);

        if (! $authGuard->user()->hasAnyRole($rolesOrPermissions) && ! $authGuard->user()->hasAnyPermission($rolesOrPermissions)) {
            throw UnauthorizedException::forRolesOrPermissions($rolesOrPermissions);
        }
    }
}

Save it into App\Traits\Admin

and... Into the livewire coponent something like that.

namespace App\Http\Livewire\Admin;

use Livewire\Component;
...
...
use App\Traits\Admin\RoleOrPermissionSpatie;



class Programas extends Component
{
    use RoleOrPermissionSpatie;
    public function __construct()
    {
      $this->handlePermission('role1|role2|permission1');
    }
}

And we can use the trait like the middleware...

Sory I'am so late.

in my case.

This can be used to check the permission

abort_if(Gate::denies('user-read'), Response::HTTP_FORBIDDEN, 'Forbidden');

this can be used to check the role

$userLogIn = Auth::user();
abort_if(!($userLogIn && $userLogIn->hasRole('Admin')), Response::HTTP_FORBIDDEN, 'Forbidden');
       

permission checking can also be done on each method if needed.

and don't forget to add

use Illuminate\Support\Facades\Gate;
use Illuminate\Http\Response;

use Illuminate\Support\Facades\Auth;