seems web middleware not called

[MattiaMarchiorato]

Hello,

is project upgraded to laravel 11 form 10 recently, we tried to install the package, we add the LogViewer::auth in the AppServiceProvider but when we hit the url http://127.0.0.1:8081/log-viewer seems the $request->user() is empty.

LogViewer::auth(function ($request) {
 return $request->user()->isAdmin();
});

 'middleware' => [
        'web',
        \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
],

APP_URL=http://127.0.0.1:8081

We also tried with the gate but with the same issue.

With a dd

        LogViewer::auth(function ($request) {
            dd($request->user()->isAdmin());
            return $request->user()->isAdmin();
        });

we receive true

Thanks

[MattiaMarchiorato]

Adding a custom middleware 'admin'

'middleware' => [
        'web',
        'admin'
 ],

is working, but is very strange that is not working with the LogViewer::auth

[MattiaMarchiorato]

LogViewer::auth(function ($request) {
            Log::info(['user request', $request->user()]);
            Log::info(['user auth', Auth::user()]);
            return true;
});

With some logging

[arukompas]

@MattiaMarchiorato hey!

How is your web middleware group defined?

I have created a sample project with default Laravel 11 + Breeze + Log Viewer setup. This could help you see what could be different from your project that might affect authentication.

live demo: https://laravel11-example-auth.log-viewer.opcodes.io/ (user: test@example.com, pass: password)
codebase: https://github.com/opcodesio/laravel-11-log-viewer-example-auth

The demo is hosted on Ubuntu 24.0, using PHP 8.3 and Nginx.

If you can find the differences, or provide your own example repo where we can reproduce the issue, that would be super helpful! Thanks 🙌

[MattiaMarchiorato]

Hello @arukompas

protected $middlewareGroups = [
        'web' => [
            \App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Laravel\Jetstream\Http\Middleware\AuthenticateSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        ],

is the classic Laravel 10 middleware group definition.
Right now we are not using this package anymore.

Thanks

MM