在 laravel 中为未登录用户授权资源

Question

While in policy class I have

public function create(User $user)
{
    return true;
}

but I get unauthorized error for unauthenticated users.

So how can I exclude the store method from authorization in authorizeResource?

Answer 1

To be able to use guest users with Laravel's authorisation you simply need to type-hint that the user is nullable:

public function create(?User $user)
{
    return true;
}

or you can set the default value to null

public function create(User $user = null)
{
    return true;
}

For more information you can check the documentation

Answer 2

If you are adding your route is located inside a group that forces auth middleware you just need to get it out of this group:

Route::post('company/create', 'CompanyController@create');
Route::group(['middleware' => 'auth'], function () {
  //Your authenticated routes
  Route::apiResource('companyregister' , 'CompanyRegisterController')->except(['update', 'create']);
})