Problem with granting access on prod. Middleware/Gate does not work.

[peroxovy]

I've encountered an issue during setting up it on production.

Receiving either Request failed with status code 403 or 403 directly.

I've published a config and I've put my custom middleware to it:

'middleware' => [
        'web',
        \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
        'check-log-viewer-access',
    ],

My middleware for test case is passing through every time:

public function handle(Request $request, Closure $next)
{
    return $next($request);
}

And it still returns 403.

Trying to set it like in docs: Via "auth" callback or Via "viewLogViewer" Gate also fails, because when I want to retrieve $user->username it returns null.

My AuthServiceProvider.php:

public function boot()
{
    $this->registerPolicies();

    Gate::define('viewLogViewer', function (?User $user) {
        return $user->username === 'peroxovy';
     });
}

My AppServiceProvider.php:

 public function boot()
    {
        LogViewer::auth(function ($request) {
            return $request->user()
                && in_array($request->user()->username, [
                    'peroxovy',
                ]);
        });
    }

Request failed with status code 500: Attempt to read property "username" on null

Unfortunately it does not even work when I try to get any other of the properties...

Any idea how I can progress with that issue?

Laravel version: 9.52.16
Log-viewer version: 3.14.0

[arukompas]

Hi @peroxovy ,

What's defined in the api_middleware configuration option?

Is this error coming from initial page load, or do you at least see the skeleton of Log Viewer and the files are not loading?

Is Log Viewer on the same domain as your main app? Are you sure browser cookies are sent to this request as expected? Check browser's Network tab to see what request headers are sent and ensure the Laravel session cookie is part of it for all requests (both initial request and the follow-up XHR requests).

Let me know what you find! :)

[gwillyoo]

I have the same problem.

the route /log-viewer/api/folders?direction=desc is resulting 403 unauthorized. same, i have set LogViewer::auth() or Gate::define().

I have logged in as super_admin.

Gate::define('viewLogViewer', function(?User $user): bool {
    return $user && $user->hasRole('super_admin');
});

or

LogViewer::auth(function (Request $request) {
   return $request->user() &&
       $request->user()->hasRole('super_admin');
});

the middlewares in config :

'api_middleware' => [
    \Opcodes\LogViewer\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
    \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
]

'middleware' => [
    'web',
    \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
],

also have tried :

'middleware' => [
    'web',
   'auth',
    \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
],

same result. the log-viewer page is loaded, but the folders are not loaded. it shows "Request failed with status code 403: Unauthorized." message at the top left. trying to figure it out but haven't found.

[gwillyoo]

Ok, here is more from me and what i've found.

My app using 2 filamentphp login panel in one app and use LogViewer::auth($callback) (the callback same as my replied before).

I found the call_user_func, request(), and i dd request()->user() at the LogViewerServiceProvider output is null .

That's all I've found so far. I don't know if the 2 filamentphp login can cause this error, it seems the auth session is not shared to log-viewer ? 🤷‍♂️

[gwillyoo]

I have added web to api_middleware config, and it works. 🤷‍♂️

(edited)

I remove this web from the middleware and state LOG_VIEWER_API_STATEFUL_DOMAINS in .env , it works also.
I'm sorry having many comments in this discussion.

reference:
https://log-viewer.opcodes.io/docs/3.x/configuration/route-and-domain#production-domains

[arukompas]

No worries, glad you found the solution! 🙌