@rodrigo.pedra i already modify routes group base on your suggestion before i reply and the purpose of my question was to understand how things works since i'm in process of learning.
Yes, I have this middleware since i create it when try to make roles login using this tutorial:
https://learn2torials.com/a/laravel8-authentication-based-on-roles
AdminAuthenticated.php
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use App\Models\UsersList;
use Illuminate\Support\Facades\Auth;
class AdminAuthenticated
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse) $next
* @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
*/
public function handle(Request $request, Closure $next)
{
if( Auth::check() )
{
/** @var User $user */
$user = Auth::user();
// if user is not admin take him to his dashboard
if ( $user->hasRole('user') ) {
return redirect(route('dashboard'));
}
// allow admin to proceed with request
else if ( $user->hasRole('admin') ) {
return $next($request);
}
}
abort(403); // permission denied error
}
}
UserAuthenticated.php
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use App\Models\UsersList;
use Illuminate\Support\Facades\Auth;
use App\Providers\RouteServiceProvider;
class UserAuthenticated
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse) $next
* @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
*/
public function handle(Request $request, Closure $next)
{
if( Auth::check() )
{
/** @var User $user */
$user = Auth::user();
// if user is not admin take him to his dashboard
if ( $user->hasRole('admin') ) {
return redirect(route('admin_dashboard'));
}
// allow admin to proceed with request
else if ( $user->hasRole('user') ) {
return $next($request);
}
}
abort(403); // permission denied error
}
}
RedirectIfAuthenticated.php
<?php
namespace App\Http\Middleware;
use App\Providers\RouteServiceProvider;
use Closure;
use App\Models\UsersList;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
class RedirectIfAuthenticated
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse) $next
* @param string|null ...$guards
* @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
*/
public function handle(Request $request, Closure $next, ...$guards)
{
$guards = empty($guards) ? [null] : $guards;
foreach ($guards as $guard) {
if (Auth::guard($guard)->check()) {
/** @var User $user */
$user = Auth::guard($guard);
// to admin dashboard
if($user->hasRole('admin')) {
return redirect(route('admin_dashboard'));
}
// to user dashboard
else if($user->hasRole('user')) {
return redirect(route('dashboard'));
}
}
}
return $next($request);
}
}
AuthenticatedSessionController.php
<?php
namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller;
use App\Http\Requests\Auth\LoginRequest;
use App\Providers\RouteServiceProvider;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
class AuthenticatedSessionController extends Controller
{
/**
* Display the login view.
*
* @return \Illuminate\View\View
*/
public function create()
{
return view('auth.login');
}
/**
* Handle an incoming authentication request.
*
* @param \App\Http\Requests\Auth\LoginRequest $request
* @return \Illuminate\Http\RedirectResponse
*/
public function store(LoginRequest $request)
{
$request->authenticate();
$request->session()->regenerate();
if( Auth::check() )
{
/** @var User $user */
$user = Auth::user();
// if user is not admin take him to his dashboard
if ( $user->hasRole('admin') ) {
return redirect(route('admin_dashboard'));
}
// allow admin to proceed with request
else if ( $user->hasRole('user') ) {
return redirect(route('dashboard'));
}
}
/*return redirect()->intended(RouteServiceProvider::HOME);*/
}
/**
* Destroy an authenticated session.
*
* @param \Illuminate\Http\Request $request
* @return \Illuminate\Http\RedirectResponse
*/
public function destroy(Request $request)
{
Auth::guard('web')->logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect('/');
}
}
Kernel.php
<?php
namespace App\Http;
use Illuminate\Foundation\Http\Kernel as HttpKernel;
class Kernel extends HttpKernel
{
/**
* The application's global HTTP middleware stack.
*
* These middleware are run during every request to your application.
*
* @var array<int, class-string|string>
*/
protected $middleware = [
// \App\Http\Middleware\TrustHosts::class,
\App\Http\Middleware\TrustProxies::class,
\Illuminate\Http\Middleware\HandleCors::class,
\App\Http\Middleware\PreventRequestsDuringMaintenance::class,
\Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
\App\Http\Middleware\TrimStrings::class,
\Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
];
/**
* The application's route middleware groups.
*
* @var array<string, array<int, class-string|string>>
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
'api' => [
// \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
'throttle:api',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
];
/**
* The application's route middleware.
*
* These middleware may be assigned to groups or used individually.
*
* @var array<string, class-string|string>
*/
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
'can' => \Illuminate\Auth\Middleware\Authorize::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
'user' => \App\Http\Middleware\UserAuthenticated::class,
'admin' => \App\Http\Middleware\AdminAuthenticated::class,
];
}
web.php
<?php
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\UsersListController;
use App\Http\Controllers\CategoriesListController;
use App\Http\Controllers\SubCategoriesListController;
use App\Http\Controllers\PostsListController;
/*
|--------------------------------------------------------------------------
| Web Routes
|--------------------------------------------------------------------------
|
| Here is where you can register web routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| contains the "web" middleware group. Now create something great!
|
*/
Route::get('/', function () {
return view('welcome');
})->name('welcome');
Route::controller(UsersListController::class)->middleware(['auth', 'admin'])->prefix('admin')->group( function () {
Route::get('/users', 'DisplayUsers')->name('usersList');
Route::get('/users/add', 'AddUser')->name('AddUser');
Route::post('/users/add', 'StoreUser')->name('StoreUser');
Route::get('/users/edit/{id}', 'EditUser')->name('EditUser');
Route::post('/users/update/{id}', 'UpdateUser')->name('UpdateUser');
Route::post('/users/delete/{id}', 'DeleteUser')->name('DeleteUser');
});
Route::controller(UsersListController::class)->middleware(['auth', 'admin'])->prefix('admin')->group( function () {
Route::get('/categories', 'DisplayCategories')->name('categoriesList');
Route::post('/categories/add', 'AddCategory')->name('AddCategory');
Route::post('/categories/update/{id}', 'UpdateCategory')->name('UpdateCategory');
Route::post('/categories/delete/{id}', 'DeleteCategory')->name('DeleteCategory');
});
Route::controller(UsersListController::class)->middleware(['auth', 'admin'])->prefix('admin')->group( function () {
Route::get('/subcategory', 'DisplaySubCategories')->name('subCategoriesList');
Route::get('/getcategories', 'GetCategories')->name('GetCategories');
Route::post('/subcategory/add', 'AddSubCategory')->name('AddSubCategory');
Route::post('/subcategory/update/{id}', 'UpdateSubCategory')->name('UpdateSubCategory');
Route::post('/subcategory/delete/{id}', 'DeleteSubCategory')->name('DeleteSubCategory');
});
Route::controller(UsersListController::class)->middleware(['auth', 'user'])->prefix('user')->group( function () {
Route::get('/posts', 'DisplayPosts')->name('postsList');
Route::get('/getsubcategories', 'GetSubCategories')->name('GetSubCategories');
Route::get('/posts/add', 'AddPost')->name('AddPost');
Route::post('/posts/add', 'StorePost')->name('StorePost');
Route::get('/posts/edit/{id}', 'EditPost')->name('EditPost');
Route::post('/posts/update/{id}', 'UpdatePost')->name('UpdatePost');
Route::post('/posts/delete/{id}', 'DeletePost')->name('DeletePost');
});
// USER DASHBOARD
Route::get('/dashboard', function () {
return view('dashboard');
})->middleware(['auth', 'user'])->name('dashboard');
// ADMIN DASHBOARD
Route::get('/admin_dashboard', function () {
return view('dashboardAdmin');
})->middleware(['auth', 'admin'])->name('admin_dashboard');
require __DIR__.'/auth.php';
