My middleware seems not working to check Authenticate user

[frankmaruf]

App/GraphQL/Middleware/AuthHeader.php

<?php
namespace App\GraphQL\Middleware;
use Closure;
use GraphQL\Type\Definition\ResolveInfo;
use Illuminate\Support\Facades\Cookie;
use Rebing\GraphQL\Support\Middleware;
use Illuminate\Support\Facades\Auth;
class AuthHeader extends Middleware
{
    public function handle($root, array $args, $context, ResolveInfo $info, Closure $next)
    {
        $cookie = Cookie::get('token');
        if (!$cookie) {
            $message = "Invalid credentials";
            $response = [
                'message' => $message,
            ];
            return $response;
        }
        if($cookie != $args['headers']['Authorization']){
            $message = "Invalid credentials";
            $response = [
                'message' => $message,
            ];
            return $response;
        }
        if(!Auth::check()){
            $message = "Invalid credentials";
            $response = [
                'message' => $message,
            ];
            return $response;
        }
        if($cookie){
            $context['request']->headers->all();
            $args['headers']['Authorization'] = $cookie;
            $args['headers']['X-CSRF-TOKEN'] = $cookie;
            $args['headers']['Authorization'] = 'Bearer ' . $cookie;
            $args['headers']['Authorization'] = 'Bearer '.$cookie;
        }
        return $next($root, $args, $context, $info);
    }
}

config/graphql.php

'schemas' => [
'default' => [
'query' => [
'users' => \App\GraphQl\Queries\User\UsersQuery::class,
],
'mutation' => [
'userLogin' => App\GraphQL\Mutations\Authentication\UserLoginMutation::class,

        ],
        'types' => [
            'LoginResponse' => \App\GraphQL\Types\Authentication\LoginResponseType::class,
        ],
        'middleware' => [
             'gqlauth' => \App\GraphQL\Middleware\AuthHeader::class,
        ],
        'method' => ['GET', 'POST'],
        'execution_middleware' => [
            \Rebing\GraphQL\Support\ExecutionMiddleware\UnusedVariablesMiddleware::class,
        ],
    ],
],

my full Repositories https://github.com/frankmaruf/Authentication-System-Using-Larael-And-React
if I'm doing it wrong, help me to do it the right way.

[mfn]

$args['headers']

This and the rest of your code looks like you would expect $args kind of mirrors the request object, containing headers and what not.

But these are the GraphQL arguments to your query/mutation, an entirely different thing.

On top of my head:

• doing this all in a "GraphQL Middleware" might not be the best approach, just use a regular Laravel HTTP middleware for authentication
• otherwise, get hold of the Request object and work with that

[frankmaruf]

CheckAccess.php

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Auth\Middleware\Authenticate as Middleware;
use Illuminate\Support\Facades\Auth;

class CheckAccess extends Middleware
{
    public function handle($request, Closure $next, ...$guards)
    {
        if ($token = $request->cookie('token')) {
            $request->headers->set('Authorization', 'Bearer ' . $token);
        }
        $user = Auth::user();
        if (!$user) {
            $message = "Invalid credentials";
            $response = [
                'message' => $message,
            ];
            return $response;
        }
        $this->authenticate($request, $guards);
        return $next($request);
    }
}

graphql.php

    'schemas' => [
        'default' => [
            'query' => [
                'user' => \App\GraphQL\Queries\User\UserQuery::class,
                'users' => \App\GraphQl\Queries\User\UsersQuery::class,
                'quest' => \App\GraphQL\Queries\Quest\QuestQuery::class,
                'quests' => \App\GraphQL\Queries\Quest\QuestsQuery::class,
                'category' => \App\GraphQL\Queries\Category\CategoryQuery::class,
                'categories' => \App\GraphQL\Queries\Category\CategoriesQuery::class,
            ],
            'mutation' => [
                'createUser' => \App\GraphQL\Mutations\User\CreateUserMutation::class,
                'updateUser' => \App\GraphQL\Mutations\User\UpdateUserMutation::class,
                'deleteUser' => \App\GraphQL\Mutations\User\DeleteUserMutation::class,
                'createQuest' => \App\GraphQL\Mutations\Quest\CreateQuestMutation::class,
                'updateQuest' => \App\GraphQL\Mutations\Quest\UpdateQuestMutation::class,
                'deleteQuest' => \App\GraphQL\Mutations\Quest\DeleteQuestMutation::class,
                'createCategory' => \App\GraphQL\Mutations\Category\CreateCategoryMutation::class,
                'updateCategory' => \App\GraphQL\Mutations\Category\UpdateCategoryMutation::class,
                'deleteCategory' => \App\GraphQL\Mutations\Category\DeleteCategoryMutation::class,
                'userLogin' => App\GraphQL\Mutations\Authentication\UserLoginMutation::class,

            ],
            // The types only available in this schema
            'types' => [
                'User' => \App\GraphQL\Types\UserType::class,
                'Quest' => \App\GraphQL\Types\QuestType::class,
                'Category' => \App\GraphQL\Types\CategoryType::class,
                'LoginResponse' => \App\GraphQL\Types\Authentication\LoginResponseType::class,
            ],
            // Laravel HTTP middleware
            'middleware' => [
                // 'web',
                // \App\Http\Middleware\CheckAccess::class,
                'check-auth',
                'check-auth' => [
                    'only' => [
                        'user',
                        'users',
                        'quest',
                        'quests',
                        'category',
                        'categories',
                        'createUser',
                        'updateUser',
                        'deleteUser',
                        'createQuest',
                        'updateQuest',
                        'deleteQuest',
                        'createCategory',
                        'updateCategory',
                        'deleteCategory',
                    ],
                    'except' => [
                        'userLogin',
                        "LoginResponse",
                    ],
                ],
                \Illuminate\Cookie\Middleware\EncryptCookies::class,
                \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            ],
            // Which HTTP methods to support; must be given in UPPERCASE!
            'method' => ['GET', 'POST'],
            // An array of middlewares, overrides the global ones
            'execution_middleware' => [
                \Rebing\GraphQL\Support\ExecutionMiddleware\UnusedVariablesMiddleware::class,
            ],
        ],
    ],

let me explain to you what I want to do. I have users. But those who are logged in can able to see my users list.
it's not working.
what else should I do?
or I am doing it in the wrong way?
please help me to solve this problem it's been like 5 days I haven't got any solution.
or can you give a an advance proper documentation for using graphql-laravel?
even I have shown you first I had Class at App\GraphQL\Middleware with the name of AuthHeader. You told me to use Request I also used it like this

<?php
namespace App\GraphQL\Middleware;
use Closure;
use GraphQL\Type\Definition\ResolveInfo;
use Illuminate\Support\Facades\Cookie;
use Rebing\GraphQL\Support\Middleware;
use Illuminate\Support\Facades\Auth;
use Illuminate\Http\Request;

class AuthHeader extends Middleware
{
    public function handle($root, array $args, $context, ResolveInfo $info, Closure $next)
    {
        $cookie = Cookie::get('token');
        if (!$cookie) {
            $message = "Invalid credentials";
            $response = [
                'message' => $message,
            ];
            return $response;
        }
        if($cookie){
            $context['request']->headers->all();
            $request = new Request();
            $request->headers->set('Authorization', $cookie);
            $request->headers->set('X-CSRF-TOKEN', $cookie);
            $request->headers->set('Authorization', 'Bearer '.$cookie);
            $context['request'] = $request;
            $args['headers']['Authorization'] = $cookie;
            $args['headers']['X-CSRF-TOKEN'] = $cookie;
            $args['headers']['Authorization'] = 'Bearer ' . $cookie;
            $args['headers']['Authorization'] = 'Bearer '.$cookie;
        }
        return $next($root, $args, $context, $info);
    }
}

it seems not working.
😢😢😢
please sir understand my feelings I have been trying to solve it for 5 days but I haven't got any solution.

[frankmaruf]

@mfn sir please help

[frankmaruf]

@rebing sir please help me with that