Laravel 5.8 在 api 和 app 中为 1 个用户类型使用中间件

Question

I'm trying to implement a middleware in Laravel 5.8 which checks if a value is true for a model Customer . I want the app routes to redirect to a route ( 'login' ), for the api routes I want to give a 401 response. I think I'm overseeing something.

This is my Middleware which works for the app routes, but I can't get the middleware to handle the unauthorized requests ( $user['dropshipping'] === false ) correctly..

public function handle($request, Closure $next)
{
    $user = Auth::user();

    if($user instanceof Customer) {
        if ($user->guard(['web'])['dropshipping']) {
            return $next($request);
        } elseif($user->guard(['customer-api'])['dropshipping']) {
            return $next($request);
        } else {
            return redirect(route('login'))->with('error', 'Account not activated, please contact TWM BV.');
        }
    } else {
        return $next($request);
    }
}

Answer 1

Guards are associated to Auth not to users.

So you can use Auth::guard('guard-name') or auth()->guard('guard')

public function handle($request, Closure $next)
{
    $user = Auth::user();

    if($user instanceof Customer) {
        if (auth()->guard('web')->user()->dropshipping) {
            return $next($request);
        } elseif(auth()->guard('customer-api')->user()->dropshipping) {
            return $next($request);
        } else {
            return redirect(route('login'))->with('error', 'Account not activated, please contact TWM BV.');
        }
    } else {
        return $next($request);
    }
}