Dev.to

Multi-guard authentication with Laravel 12

In this tutorial i will walk you through implementing multiguard authentication using laravel 12+. Below are the steps we will have to follow. Create the model and migration for both admin and users. Create the required guards. Define the routes and controllers. Configure the redirects for the guards. Logout Conclusion Creating the model We need to have the models we want to create. Make sure that the models extend from the Illuminate\Foundation\Auth\User class User model

May 11, 2025 - 01:39
 0
Multi-guard authentication with Laravel 12

In this tutorial i will walk you through implementing multiguard authentication using laravel 12+.

Below are the steps we will have to follow.

  1. Create the model and migration for both admin and users.
  2. Create the required guards.
  3. Define the routes and controllers.
  4. Configure the redirects for the guards.
  5. Logout
  6. Conclusion

Creating the model

We need to have the models we want to create. Make sure that the models extend from the Illuminate\Foundation\Auth\User class

User model 

 'datetime',
            'password' => 'hashed',
        ];
    }
}

Admin model 

 'datetime',
            'password' => 'hashed',
        ];
    }
}

Create the required guards

In config/auth.php, define the required guards. The default guard is web while we will define and extra one as admin. Also here we are adding a new admins provider pointing to the App\Models\Admin class

 'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],
        'admin' => [
            'driver' => 'session',
            'provider' => 'admins',
        ],
    ],

'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => env('AUTH_MODEL', App\Models\User::class),
        ],

        'admins' => [
            'driver' => 'eloquent',
            'model' => App\Models\Admin::class,
        ],
    ],

Define the routes and controllers.

Next we define our routes. So here we have the the basic routes. You'll notice that we have the custom guard that we defined.

group(function () {
    Route::get('login', [LoginController::class, 'loginForm'])->name('login');
    Route::post('login', [LoginController::class, 'login'])->name('login-user');
});

Route::middleware('guest:admin')->group(function () {
    Route::get('/admin/login', [AdminLoginController::class, 'loginForm'])->name('admin.login');
    Route::post('/admin/login', [AdminLoginController::class, 'login'])->name('admin.login-admin');
});


Route::middleware('auth')->get('dashboard', DashboardController::class)->name('dashboard');
Route::middleware('auth:admin')->get('/admin/dashboard', AdminDashboardController::class)->name('admin.dashboard');

The LoginController

route('dashboard');
    }
}

The AdminLoginController

login($admin);
        return redirect()->route('admin.dashboard');
    }
}

Configure the redirects for the guards

You'll notice that when you are not logged in and you try to access the /admin/dashboard as a guest you get redirected to /login instead of /admin/login. So how do we get redirected to the desired urls?

So for that we have to replace the auth and guest aliases in bootstrap/app.php.
So auth aliases the \Illuminate\Auth\Middleware\Authenticate' middleware while the guest aliases the\Illuminate\Auth\Middleware\RedirectIfAuthenticated' middleware.
To configure the redirects, we are going to create our own Authenticate and RedirectIfAuthenticated middleware.

php artisan make:middleware Authenticate
php artisan make:middleware RedirectIfAuthenticated

Now replace the aliases with these new middleware.

withRouting(
        web: __DIR__ . '/../routes/web.php',
        commands: __DIR__ . '/../routes/console.php',
        health: '/up',
    )
    ->withMiddleware(function (Middleware $middleware) {
        $middleware->alias([
            'guest' => RedirectIfAuthenticated::class,
            'auth' => Authenticate::class,
        ]);
    })
    ->withExceptions(function (Exceptions $exceptions) {
        //
    })->create();

Now for the RedirectIfAuthenticated middleware, in the handle method we just have to set the required destination route if the requesting guard is admin or web.

check()) {
                switch ($guard) {
                    case 'admin':
                        return redirect()->route('admin.dashboard');
                        break;
                    default:
                        return redirect()->route('dashboard');
                }
            }
        }

        return $next($request);
    }
}

Now for the for the Authenticate middleware it's a bit different. We have to modify the $redirectTo parameter of the AuthenticationException that is thrown when the unauthenticated method is called

Logout

To logout you just call the guards.

Auth::guard('admin')->logout();
Auth::guard('web')->logout();

Conclusion

And voilà. We now have redirects working as they should. You now have a working multi-guard authentication system. You can add as many models as you choose. You can access the code here.

Read More

Tags:

Previous Article

Get Natural James Earl Jones AI Voice with Voice Generator

Next Article

Daily JavaScript Challenge #JS-175: Arrange Array by Absolute Value

Related Posts

AI in Project Management

AI in Project Management

Apr 28, 2025  0

May 5, 2025  0

Why Financial Calculations Go Wrong, and How to Get Them Right

Why Financial Calculations Go Wrong, and How to Get The...

May 6, 2025  0