Laravel owner middleware not working - laravel

Question

I created a middleware (app/Http/Middleware/AbortIfNotOwner.php), this is code from another Stackoverflow post
<?php
namespace App\Http\Middleware;
use Closure;
use DB;
class AbortIfNotOwner
{
/**
* Handle an incoming request.
*
* #param \Illuminate\Http\Request $request
* #param \Closure $next
* #param string $resourceName
* #return mixed
*/
public function handle($request, Closure $next, $resourceName)
{
$resourceId = $request->route()->parameter($resourceName);
$user_id = \DB::table($resourceName)->find($resourceId)->user_id;
if ($request->user()->id != $user_id) {
abort(403, 'Unauthorized action.');
}
return $next($request);
}
}
I register it in the app\Http\Kernel.php
protected $routeMiddleware = [
'owner' => 'App\Http\Middleware\AbortIfNotOwner',
];
and in my route file I have:
Route::group(['middleware' => ['owner:bids']], function() {
Route::get('user/{id}/bids', ['as' => 'buyer_bids', 'uses' => 'User\Buyer\BidsController#getBidsPerUser']);
});
When I run this code I get an
ErrorException in AbortIfNotOwner.php line 23: Trying to get property
of non-object
This refers to the following lines in the middleware:
> $resourceId = $request->route()->parameter($resourceName);
> $user_id = \DB::table($resourceName)->find($resourceId)->user_id;
The issue seems to be that resourceId is null I think. I do have a field user_id in the bids table, so am not sure what is wrong. The route URL is like /user/2/bids.
EDIT - SOLVED
I found that the below works:
$user_id = \DB::table($resourceName)->find($request->id)->user_id;
instead of
$resourceId = $request->route()->parameter($resourceName);
$user_id = \DB::table($resourceName)->find($resourceId)->user_id;
This works with the routes like
Route::get('/{id}/bids'
EDIT - SOLVED - Other solution
$resourceId = $request->route()->parameter($resourceName);
$user_id = \DB::table($resourceName)->find($resourceId)->user_id;
will work if the route is changed to
Route::get('/{bids}/bids'
... instead of
Route::get('/{id}/bids'...

Answer 1

Change your route like this Route::get('user/{bids}/bids'... becasse to get a route parameter like this $request->route()->parameter('name') it has to match the parameter name in the route, meaning the bolded one user/{bids}/bids.

Answer 2

\DB::table($resourceName)->find($resourceId) is returning null (no results), so there's no user_id property to it. Check that you've found a result before attempting to access its properties.
Same thing for $request->user()->id - if $request->user() is null due to the user not being logged in, it'll fail.