moved RemoteUserAuthenticate before Authenticate
Having RemoteUserAuthenticate after Authenticate does nothing - a request requiring a login was already redirected away before reaching the logic to load the user from the REMOTE_USER server setting. Moving RemoteUserAuthenticate before Authenticate fixes this.
This commit is contained in:
@@ -151,8 +151,8 @@ class RouteServiceProvider extends ServiceProvider
|
||||
];
|
||||
|
||||
if ($applyAlwaysAuthenticate && !$this->isWhiteListedAuthRoute($routes)) {
|
||||
$middleware[] = Authenticate::class;
|
||||
$middleware[] = RemoteUserAuthenticate::class;
|
||||
$middleware[] = Authenticate::class;
|
||||
}
|
||||
|
||||
$router->group(['middleware' => $middleware], function (Router $router) use ($routes) {
|
||||
|
||||
Reference in New Issue
Block a user