Category: Laravel, api

A very particular problem on my hands— make sure we are not allowing access to a disabled user. The check (is user disabled or not) is performed against another service via API call.

Two days later Steve’s account is disabled by the system administrator.

I trust this being not an issue for a proper authentication/authorisation package, not in my case, though — I was dealing with legacy.

The logic was simple — if you have been allowed access viaRemember() then we check if your account is disabled.
Newsletter

Get the latest Laravel/PHP jobs, events and curated articles straight to your inbox, once a week

Fathom Analytics | Fast, simple and privacy-focused website analytics. Fathom Analytics | Fast, simple and privacy-focused website analytics.
Achieve superior email deliverability with ToastMail! Our AI-driven tool warms up inboxes, monitors reputation, and ensures emails reach their intended destination. Sign up today for a spam-free future. Achieve superior email deliverability with ToastMail! Our AI-driven tool warms up inboxes, monitors reputation, and ensures emails reach their intended destination. Sign up today for a spam-free future.
Community Partners