Protecting Routes with Middleware in laravel - laravel

Question

I have a project that it has two sections "admin" and "student".
I want to make a middleware that if a user who authenticated if his role was 1 automatically redirect it to admin panel and if his role was 2 automatically redirect it to student panel.
i made this middleware but when im test it i have "Too Many Rediredcts" error :
My Middleware Code :
if (auth()->check() && auth()->user()->role === 1){
return $next($request);
}else{
return redirect()->route('front.index');
}
My Routes :
How can i solve this?

Answer 1

I was facing the same issue and resolve it by using redirection with Url-like redirect('/admin/login'). Check and try the below code in your Laravel app.
if (auth()->check() && auth()->user()->role === 1){
return $next($request);
}else{
return redirect('/admin/login')->withErrors(['Access Denied']);
}
OR
if (auth()->check() && auth()->user()->role === 1){
return $next($request);
}else{
return redirect()->to('/admin/login')->withErrors(['Access Denied']);
}

Answer 2

Without seeing your middleware, it's hard to identify the problem, but the rest of your code looks fine. Try changing your your middleware to something like this:
public function handle(Request $request, Closure $next, string $roleName)
{
if (Auth::user()->isRole($roleName)) {
return $next($request);
}
abort(403);
}
We're passing a role into the middleware from the route, in your case you might pass admin. So any of your admin routes will now look like this:
Route::middleware('checkRole:admin')->prefix('admin')->group(function () {
Route::get('/', [BackController::class 'index'])->name('admin.index')
});
You are now passing a string variable to your middleware $roleName
Of course you'll also need to implement the isRole() method on your User.php Model. This will be something like:
/**
* #return HasOne
*/
public function role(): HasOne
{
return $this->hasOne(Role::class, 'id', 'role_id');
}
/**
* #return bool
*/
public function isRole($roleName): bool
{
$role = $this->role()->first();
if(!is_null($role) && $role->name == $roleName) {
return true;
}
return false;
}
I've made an assumption that you have a role_id column on your User.php Model, that you have a Role.php Model with name column which will match admin etc and you also have $routeMiddleware in Kernel.php something similar to 'checkRole' => checkRole::class,
Tested and working in Laravel 6/Laravel 8
If you wanted to test auth, I would update your route middleware to take an array, perhaps similar to:
['auth', 'checkRole:admin']
Where I have abort(403) you'll need a map of routes to roles, example: if you are an admin return redirect()->route('admin.index')