How to handle redirecting a removed user from a team to a specific route in a multi-tenancy?

[devhoussam1998]

Package

Panel builder

Package Version

v3.2.131

How can we help you?

AppPanelProvider.php

<?php

namespace App\Providers\Filament;

// ...

class AppPanelProvider extends PanelProvider
{
    use HasCorePanel;

    public function panel(Panel $panel): Panel
    {
        return $panel
            ->default()
            ->id('app')
            ->path('')
            // ...
            ->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                VerifyCsrfToken::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
                EnsureUserIsBelongsToTeam::class,
            ])
            ->authMiddleware([
                Authenticate::class,
            ])
            ->tenantMiddleware([
                ApplyTeamScopes::class,
            ], isPersistent: true);
    }
}

User.php

<?php

namespace App\Models;

// ...

class User extends Authenticatable implements FilamentUser, HasAvatar, HasTenants, MustVerifyEmail
{
    // ...

    /**
     * The teams that belong to the user.
     */
    public function teams(): BelongsToMany
    {
        return $this->belongsToMany(Team::class, 'team_user', 'user_id', 'team_id');
    }

    /**
     * Authorizing access to the panel.
     */
    public function canAccessPanel(Panel $panel): bool
    {
        return true;
    }

    /**
     * Authorizing access to the teams.
     */
    public function getTenants(Panel $panel): Collection
    {
        return $this->teams;
    }

    public function canAccessTenant(Model $tenant): bool
    {
        return $this->teams()->whereKey($tenant)->exists();
    }

    /**
     * Setting the default team.
     */
    public function getDefaultTenant(Panel $panel): ?Model
    {
        return $this->latestTeam;
    }

    public function latestTeam(): BelongsTo
    {
        return $this->belongsTo(Team::class, 'latest_team_id');
    }
}

Team.php

<?php

namespace App\Models;

// ...

class Team extends Model
{
    // ...

    /**
     * Get the user that owns the team.
     */
    public function user(): BelongsTo
    {
        return $this->belongsTo(User::class, 'user_id');
    }

    /**
     * The users that belong to the team.
     */
    public function users(): BelongsToMany
    {
        return $this->belongsToMany(User::class, Membership::class)
            ->withPivot('role')
            ->withTimestamps()
            ->as('membership');
    }
}

EnsureUserIsBelongsToTeam.php

<?php

namespace App\Http\Middleware;

use Closure;
use Filament\Facades\Filament;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class EnsureUserIsBelongsToTeam
{
    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        $user = Filament::auth()->user();

        if (! $user || ! $user->teams()->exists()) {
            if ($request->routeIs('filament.app.tenant.registration')) {
                return $next($request);
            }

            return redirect()->route('filament.app.tenant.registration');
        }

        return $next($request);
    }
}

[ShaungBhone]

Your middleware is not working?

[devhoussam1998]

middleware is working but the problem is always disabled other routes

[ShaungBhone]

    public function handle(Request $request, Closure $next): Response
    {
        $user = Filament::auth()->user();

        // Specify the routes that should be exempted from this middleware
        $exemptedRoutes = [
            'filament.app.tenant.registration',
            // Add other routes here
        ];

        if (in_array($request->route()->getName(), $exemptedRoutes)) {
            return $next($request);
        }

        if (! $user || ! $user->teams()->exists()) {
            return redirect()->route('filament.app.tenant.registration');
        }

        return $next($request);
    }

Try this for me.