In this Laravel 5 tutorial, I will let you know how to create custom middleware to filter user based on their user type.
This is the basic requirement of any web application to filter HTTP request.
There is a default middleware "auth" to authenticate users in Laravel application.
You can create multiple middleware that can be used on different routes using group feature of route.
In this example, I will create a custom middleware to check if a user is blocked by admin then he can not access the restricted routes.
Step 1: Create Custom ValidationIn this first step, I will create a middleware to check user is blocked or not.
Run below command to create middleware :
php artisan make:middleware CheckBlockStatus
Once above command have succcessfully executed then I will get a file in the middleware directory, In which I need to write my own custom logic to check wheater user is blocked or not.
app/Http/Middleware/CheckBlockStatus.php<?php namespace App\Http\Middleware; use Closure; class CheckBlockStatus { /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { if (auth()->user()->isBlocked == 0) { return $next($request); } return redirect('login')->with('error','Your account has been suspended'); } }
Now I will have to register this middleware as routeMiddleware in app/Http/Kernel.php
app/Http/Kernel.php<?php namespace App\Http; use Illuminate\Foundation\Http\Kernel as HttpKernel; class Kernel extends HttpKernel { .... /** * The application's route middleware. * * These middleware may be assigned to groups or used individually. * * @var array */ protected $routeMiddleware = [ .... 'isBlock' => \App\Http\Middleware\CheckBlockStatus::class, ]; }
Now I will call this middleware in routes to restrict logged user to access that routes if he/she is blocked by admin.
Route::group(array('middleware' => ['auth', 'isBlock']), function () { Route::get('dashboard',function(){ return "Welcome to ExpertPHP.in"; }); });
Now you can access dashboard when your account is not suspended by admin.