Laravel 5.2 Sessions not persisting - php

I've searched a lot before posting and every 'solution' that I've found did not work.
I can't get a session value from a different route than the current one.
Routes.php
Route::group(['middleware' => 'web', 'prefix' => 'blog', 'namespace' => 'Modules\Blog\Http\Controllers'], function()
{
Route::get('/','PostController#index');
Route::get('/home',['as' => 'home', 'uses' => 'PostController#index']);
Route::get('auth/login', 'Auth\AuthController#showLoginForm');
Route::post('auth/login', 'Auth\AuthController#login');
Route::group(['middleware' => 'blog.auth'], function(){
Route::get('/admin',['as'=>'dashboard','uses'=>'AdminController#index']);
});
});
Kernel.php
protected $middlewareGroups = [
'web' => [
\ommitedbutcorrect\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class
],
'admin' => [
\Modules\Admin\Http\Middleware\ControllerResolver::class,
],
'admin.auth' => [
\Modules\Admin\Http\Middleware\AdminAuthenticate::class,
],
'blog.auth' => [
\Modules\Blog\Http\Middleware\BlogAuthenticate::class,
],
'api' => [
'throttle:60,1',
],
];
AuthController.php
class AuthController extends Controller
{
use AuthenticatesAndRegistersUsers, ThrottlesLogins;
protected $redirectTo = '/blog/admin/';
public function __construct()
{
$this->middleware($this->guestMiddleware(), ['except' => 'logout']);
}
public function login()
{
dd(\Session::get('foo'));
$userdata = array(
'email' => Input::get('email'),
'password' => Input::get('password')
);
if (\Auth::attempt($userdata)) {
\Session::save();
return redirect($this->redirectTo);
}
else{
return 'f*ck';
}
}
public function showLoginForm()
{
\Session::put('foo', 'bar');
return view('blog::Admin.login');
}
Chmod 777 on Storage and Bootstrap folders, session driver database.
It seems that the session is creating itself every time with the request that would explain why I can't get the the value with Session:get('foo') which now returns null.
I wasted 3 days on this already :/.
Would appreciate the help, if you guys need more details / code just say the word.

I'm not sure why Laravel ships with session middleware in the wrong array, but move the StartSession middleware into the protected middleware group
protected $middleware = [
\Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
\Illuminate\Session\Middleware\StartSession::class,
];

Fixed by clearing the cache with php artisan cache:clear
I got my project from another person so no matter what changes I did, it used the cached settings(in this case it was using DB sessions and I wanted to use file-based sessions)

I guess it was because you use modules instead of the default structure laravel provided.
all routes bind with the web middleware by default in laravel 5.2, however, you use modules and each module has a separated routes.php file. You have to manually bind the routes with the web middleware again otherwise, your session will lost.
That was what I did when I met a similar problem. Please let me know my understanding is correct.

If you're on Laravel >= v5.2.27, you need to remove the web middleware from your app/Http/routes.php file. As of v5.2.27, all routes inside the app/Http/routes.php file are already included in the web middleware group, so adding the middleware again inside the file messes with the sessions.

What new Service Provider signed up?

Related

Can't access the Auth::user() from a custom route file ? Laravel 7

For a purpose i decided to create a separate routing file for the admin and separating its logic from the web.php but instead i am facing this issue :
//admin.php ( routing file )
<?php
use Illuminate\Support\Facades\Route;
use Illuminate\Support\Facades\Auth
Route::get('/admin', function ()
{
dd(Auth::user()); //return null
});
ps: the admin.php is registered in the RouteServiceProvider
public function map()
{
$this->mapApiRoutes();
$this->mapWebRoutes();
$this->mapAdminRoutes();
//
}
protected function mapAdminRoutes()
{
Route::middleware('admin')
->namespace('App\Http\Controllers\Admin')
->group(base_path('routes/admin.php'));
}
Add web middleware
Route::middleware(['web','admin'])->...
Let's try to defining the new route in config/auth.php
'guards' => [
'admin' => [
'driver' => 'session',
'provider' => 'users',
]
],
because you want to get session to check Auth.
So let try this one.

Flash data not being written to session

Im using Laravel 7.12.0 and my flash session data doesn't appear to be working at all either using
request()->session()->flash('status', 'Task was successful!');
or
return redirect()->route('home')->with('status', "Task was successful");
I am using Debugbar as well as dd'ing the page to check session data.
I also know that the web middleware is being used.
session()->put() still works so I know putting data into the session aren't entirely broken but flash data does not seem to work at all. This is a fresh installation so I am struggling to see what could be wrong?
Web.php
Auth::routes();
Route::get('/', 'HomeController#index')->name('home');
Route::group(['middleware' => ['auth']], function () {
Route::resource('polls', 'PollController');
Route::post('polls/vote', 'PollController#vote')->name('polls.vote');
});
Route::resource('api/polls', 'API\PollController');
Part of RouteServiceProvider.php
/**
* Define the "web" routes for the application.
*
* These routes all receive session state, CSRF protection, etc.
*
* #return void
*/
protected function mapWebRoutes()
{
Route::middleware('web')
->namespace($this->namespace)
->group(base_path('routes/web.php'));
}
Web Middleware group in kernel.php
/**
* The application's route middleware groups.
*
* #var array
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
// \Illuminate\Session\Middleware\AuthenticateSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
'api' => [
'throttle:60,1',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
];
HomeController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
class HomeController extends Controller
{
public function index()
{
dd(request()->session()->all());
}
}
What is in the session from my HomeController#index after being redirected.
"_token" => "pbZJgfC6XNG2eTqlcGADm68NqhjOHI16rWe4U1bt"
"_previous" => array:1 [▼
"url" => "http://127.0.0.1:8000"
]
"_flash" => array:2 [▼
"old" => []
"new" => []
]
"url" => []
"login_web_59ba36addc2b2f9401580f014c7f58ea4e30989d" => 1
]
Thanks
Seems as though this has to do with the hosting environment. I was able to reproduce the issue on my local machine when using http://127.0.0.1:8000. After switching to http://localhost:8000 the sessions started to persist as expected with both ->flash and ->with.

Laravel set cookie in API not set

I using laravel 5 as Rest API, and I want to set a cookie in controller:
return response()->json(['success' => $data], $this-> successStatus)->cookie('name', 'myvalue');
this return with response cookie successfully, but can not access in front, I also used:
Cookie::queue($name, $value);
Or
Cookie::queue(Cookie::make('cookieName', 'value'));
Or all way in google, stackoverflow, but none of these set cookie in browser, I need to set http only cookie in browser via laravel controller. how can i do this?
I also used php cookie, no success
Cookies will be set on web middleware group only not api. According to docs, Laravel comes with web and api middleware groups that contain common middleware you may want to apply to your web UI and API routes:
/**
* The application's route middleware groups.
*
* #var array
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
//...
],
'api' => [
'throttle:60,1',
'auth:api',
],
];
As you can see, EncryptCookies and AddQueuedCookiesToResponse middlewares are applied to web group only but not api.
// This works and sets encrypted cookie on response.
Route::group(['middleware' => ['web']], function () {
return response()
->cookie('name', 'value');
});
// This won't set cookie on response.
Route::group(['middleware' => ['api']], function () {
return response()
->cookie('name', 'value');
});
You may use
$response = new \Illuminate\Http\JsonResponse(['success' => $data], $this->successStatus);
$response->withCookie(cookie($cookieName, $cookieVal, 45000));
return $response;
Illuminate\Http\JsonResponse
Normally we cannot set cookies in API route due to EncryptCookies and AddQueuedCookiesToResponse not being added by default. So we have to add those classes in the kernel with API middleware.
'api' => [
//my change
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
//end of my change
\Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
'throttle:api',
\Illuminate\Routing\Middleware\SubstituteBindings::class,
],
Then we can set and get a cookie.

Auth::id() can't find user id and return null, laravel

I am setting like and unlike options on articles. but in LikeController there is problem. when I push the like button it says ->
SQLSTATE[23000]: Integrity constraint violation: 1048 Column 'user_id'
cannot be null (SQL: insert into likes (user_id, article_id,
updated_at, created_at) values (?, 5, 2019-05-30 07:58:34,
2019-05-30 07:58:34))
Updated JWT and Routes
Like model:
class Like extends Model
{
public $timestamps = true;
public $with = ["user"];
protected $fillable = ["user_id", "article_id"];
public function article()
{
return $this->belongsTo("App\Article");
}
public function user()
{
return $this->belongsTo("App\User");
}
}
and LikeController:
use Auth;
use App\Article;
use App\Like;
public function like($id)
{
$article = Article::find($id);
$like = Like::create([
"user_id" => Auth::id(),
"article_id" => $article->id
]);
return Like::find($like->id);
}
public function unlike($id)
{
$article = Article::find($id);
Like::where("user_id", Auth::id())
->where("article_id", $article->id)
->first()
->delete();
return 1;
}
I am not very sure why Auth::id() can't find the user id and return null?
Using JWT with vue.js
Routes:
Route::group(['prefix' => 'auth'], function ($router) {
Route::post('register', 'AuthController#register');
Route::post('login', 'AuthController#login');
Route::post('logout', 'AuthController#logout');
Route::post('refresh', 'AuthController#refresh');
Route::post('me', 'AuthController#me');
});
Route::get("/like/{id}", [
"uses" => "LikeController#like"
]);
Route::get("/unlike/{id}", [
"uses" => "LikeController#unlike"
]);
AuthController and User
to set controller and user model I followed the docs: https://jwt-auth.readthedocs.io/en/develop/quick-start/
You seem to have not protected your LikeController routes with auth.
Unless you have something like this in your LikeController for constructor:
public function __construct()
{
$this->middleware('auth:api');
}
then you should have your LikeController routes protected like this:
Route::group([
'middleware' => 'api',
], function ($router) {
Route::get("/like/{id}", [
"uses" => "LikeController#like"
]);
Route::get("/unlike/{id}", [
"uses" => "LikeController#unlike"
]);
});
Then the correct way of getting the logged in used is
auth('api')->user()
or
Auth::guard('api')->user()
Auth::user()->id
use this code
Try importing Auth as such
use Illuminate\Support\Facades\Auth;
and getting the ID like this:
$user = Auth::user();
$id = $user->id;
Hope this helps
Add this middelware on kernel.php
protected $middlewareGroups = [
'web' => [
\Illuminate\Session\Middleware\StartSession::class,
],
];
this link might help :
Answer Link
first: ensure that route or Controller protected by auth middleware.
second: ensure that you are using correct guard for auth, if using multiple guard.
you should specify your guard name like this: `Auth::guard('admin')->id()`
You have missed to specify the middleware => api from the route groups. Also include the like related routes Or any protected routes within this routegroup.
config/auth.php shoud be updated as
'defaults' => [
'guard' => 'api',
'passwords' => 'users',
],
...
'guards' => [
'api' => [
'driver' => 'jwt',
'provider' => 'users',
],
],
In routes/api.php
Route::post('login', 'AuthController#login')->name('login');
Route::group(['middleware' => 'api'], function ($router) {
Route::group(['prefix' => 'auth'], function ($router) {
Route::post('register', 'AuthController#register');
# Route::post('login', 'AuthController#login'); // commented.
Route::post('logout', 'AuthController#logout');
Route::post('refresh', 'AuthController#refresh');
Route::post('me', 'AuthController#me');
});
Route::get("/like/{id}", [
"uses" => "LikeController#like"
]);
Route::get("/unlike/{id}", [
"uses" => "LikeController#unlike"
]);
});
Ok ,
so i was also having that issue with my app when i was using jwt with vue js.
for getting current Auth::user().
You need to pass token with your request.
if you check jwt core file, It getting user from token.
and you are not passing token I guess.
If yes then please pass token along with your request.
And also check the documentation of jwt. did you install your package properly?
remember for laravel 5.5 or greater, that package version to use is jwt > 1.0.0
also, check the documentation of that version properly.
Also you can use passport from Laravel where you have OAuth2 :-)
Laravel Documentation about Laravel Passport say:
Laravel makes API authentication a breeze using Laravel Passport,
which provides a full OAuth2 server implementation for your Laravel
application in a matter of minutes. Passport is built on top of the
League OAuth2 server that is maintained by Andy Millington and Simon
Hamp.
You can look more information here where you see Laravel Passport Documentation
Check if User is authenticated or not,
and don't forgot to use Auth class.
use Auth;
check if auth than delete,
And Use Auth::user()->id
if (Auth::user())
{
Like::where("user_id", Auth::user()->id)
->where("article_id", $article->id)
->first()
->delete();
}

Laravel 5.2 $errors not appearing in Blade

So I'm following along with the Laravel 5 fundamentals tutorial and I am stuck on the form validation. I have followed along exactly with the tutorial but I am getting a Undefined variable: errors in my create articles view.
In the tutorial I am following and what I have found online they say the errors variable is always there in the blade file for you to use so I don't know what i am doing wrong?
Any help would be appreciated! loving Laravel except for this error!
View
#if($errors->any())
<ul class="alert alert-danger">
#foreach($errors->any() as $error)
<li>{{$error}}</li>
#endforeach
</ul>
#endif
Controller
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\User;
use App\Http\Requests;
use App\Http\Requests\UserRequest as UserRequest;
// use App\Http\Requests\CreateArticleRequest as CreateArticleRequest;
use App\Http\Controllers\Controller;
use Illuminate\View\Middleware\ErrorBinder;
class UserController extends Controller
{
public function create(){
return view('pages.signUp');
}
public function store(UserRequest $request){
User::create($request->all());
return 'the user has been registered!';
return view('user.profile');
}
}
Request validation
<?php
namespace App\Http\Requests;
use App\Http\Requests\Request;
class UserRequest extends Request
{
/**
* Determine if the user is authorized to make this request.
*
* #return bool
*/
public function authorize()
{
return true;
}
/**
* Get the validation rules that apply to the request.
*
* #return array
*/
public function rules()
{
return [
'name' => 'required',
'email' => 'required|email',
'country' => 'required',
'password' => 'required|min:6',
'confirm_password' => 'required|same:password',
'height' => 'required',
'weight' => 'required',
];
}
}
This is a breaking problem with the 5.2 upgrade. What's happening is the middleware which is responsible for making that errors variable available to all your views is not being utilized because it was moved from the global middleware to the web middleware group.
There are two ways to fix this:
In your kernel.php file, you can move the middleware \Illuminate\View\Middleware\ShareErrorsFromSession::class back to the protected $middleware property.
You can wrap all your web routes with a route group and apply the web middleware to them.
Route::group(['middleware' => 'web'], function() {
// Place all your web routes here...
});
Solved
You may change any one of the following:
1. put your working route (app/http/routes.php) on
Route::group(['middleware' => ['web']], function () {
// Here like
Route::get('/', 'TodoController#index');
Route::post('/', 'TodoController#store');
});
Screenshot -
2. Move your protected $middlewareGroups web (app/Http/Kernel.php) on protected $middleware = []
Screenshot -
This is solution:
Change the defination of your Route groups with a middleware, from :
Route::group(['middleware' => 'web'], function () {
to
Route::group(['middlewareGroups' => 'web'], function () {
Source: https://github.com/laravel/framework/issues/13000
simply, you have to move :
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
from protected $middlewareGroups to protected $middleware
Just remove , 'middleware' => 'web' from Route::group(array('prefix' => 'user', 'middleware' => 'web'), function() in routes.php page OR
Move
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
From protected $middlewareGroups to protected $middleware in kernel.php page
As the Laravel Documentation says:
Note: If your copy of Laravel has a RouteServiceProvider that already
includes the default routes file within the web middleware group, you
do not need to manually add the group to your routes.php file.
So removing from routes.php file would be the correct way.
Posting this as it might be useful for others,
As Smartrahat mentioned in 1st solution, in your Kernel.php file(app/Http/Kernel.php) move \Illuminate\View\Middleware\ShareErrorsFromSession::class
from $middlewareGroups to protected $middleware property, but the same will start throwing the error "Session store not set on request",
to resolve this move
\Illuminate\Session\Middleware\StartSession::class, to $middleware property as well.
As of 5.2, routes.php is by default already called in the context of a ['middleware'=>'web'] by RouteServiceProvider. But in routes.php default generation of auth routes, the Route::group call is still happening by default - so if you delete that Route::group declaration from routes.php the application then correctly shows errors.
A couple of observations regarding this issue. First off there a related bug in github regarding this issue
PFA
https://github.com/laravel/framework/issues/12022
If you look at the last comment which Graham wrote, I think that is the facing I was facing.
For me even though there was a error in form post data, I was getting the below equality
boolval(count($errors) === 0) === true
In my case I added log statements in the
\Illuminate\Session\Middleware\StartSession::class
the above middleware class ran twice for a given request, I am not sure why it ran twice, but I think because of this the $errors variable is getting reset.
I was using this configuration (which I think came default with Laravel#5.2.43)
protected $middleware = [
\Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
];
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
],
'api' => [
'throttle:60,1',
],
];
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'can' => \Illuminate\Foundation\Http\Middleware\Authorize::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
];
I changed the configuration which worked for me and the $errors variable's count is not zero (also the above middleware ran only once per request)
protected $middleware = [
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
];
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
],
'api' => [
'throttle:60,1',
],
];
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'can' => \Illuminate\Foundation\Http\Middleware\Authorize::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
];
Note:
All my routes are in the web middleware group before and after the Kernel.php configuration change, I didnot move my routes at all from the web middleware group.
Change #foreach($errors->any() as $error) to #foreach($errors->all() as $error)
in this case laravel 5.2 you can refer may example code and edit your kernal.php file. move this \Illuminate\View\Middleware\ShareErrorsFromSession::class, form middlewareGroups to middleware and add \Illuminate\Session\Middleware\StartSession::class, to middleware
then its work correctly.
Having both Web and API requirements in our application, we did not want to move the middleware around; perhaps that would have worked, however:
We had the very peculiar situation that the flash[] and $errors session data was transmitted correctly between the standard laravel resource methods, store() and edit(), but in some cases the data did not get back across nearly identical methods, storeSale() and editSale().
We found that in our development and deployment environments, the 'file' and 'database' session drivers worked in all cases, but the 'cookie' driver did not.
Switching to the database driver in all instances solved the problem.

Categories