Repository navigation
User is not available #491
Description
In all API requests, such as log-viewer/api/folders etc., the User is not available, so if I check user in
LogViewer::auth(function ($request) {
$user = $request ? $request->user() : auth()->user();
});
or
Gate::define('viewLogViewer', function (?User $user) {
// return true if the user is allowed access to the Log Viewer
});
The user is null. Which makes it impossible to use "Authorizing access to Log Viewer".
Activity
bilogic commentedon Jan 21, 2026
Yea precisely, the offending route is
/log-viewer/api/folders?direction=desc, it needs to use thewebmiddleware and not its own ones otherwise I don't see a way to ACL/secure it properly in production.arukompas commentedon Feb 28, 2026
hey @dmitryBuzz , did you set the correct
APP_URLandLOG_VIEWER_API_STATEFUL_DOMAINSenvironment variables? The API endpoints don't get authorized if the requests come from unauthorized/unconfigured domain.See here: https://log-viewer.opcodes.io/docs/3.x/configuration/route-and-domain#production-domains
@bilogic The session/cookies middleware is started by the
EnsureFrontendReqeustsAreStatefuldymanically based on whether the calling domain is allowed access. See the above documentation link.