Advanced Laravel Authentication & Role Management System

// config/auth.php


'guards' => [
  'web' => [
    'driver' => 'session',
    'provider' => 'users',
  ],
  'admin' => [
    'driver' => 'session',
    'provider' => 'admins',
  ],
  'author' => [
    'driver' => 'session',
    'provider' => 'authors',
  ],
],


'providers' => [
  'users' => [
    'driver' => 'eloquent',
    'model' => App\Models\User::class,
  ],
  'admins' => [
    'driver' => 'eloquent',
    'model' => App\Models\Admin::class,
  ],
  'authors' => [
    'driver' => 'eloquent',
    'model' => App\Models\Author::class,
  ],
],

// app/Http/Middleware/AdminMiddleware.php


namespace App\Http\Middleware;


use Closure;
use Illuminate\Support\Facades\Auth;


class AdminMiddleware
{
  public function handle($request, Closure $next)
  {
    if (!Auth::guard('admin')->check()) {
      return redirect()->route('admin.login');
    }
    return $next($request);
  }
}

composer require spatie/laravel-permission
php artisan vendor:publish --provider="Spatie\Permission\PermissionServiceProvider"
php artisan migrate

use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;


$admin = Role::create(['name' => 'admin']);
$author = Role::create(['name' => 'author']);
$user = Role::create(['name' => 'user']);


Permission::create(['name' => 'manage users']);
Permission::create(['name' => 'create snippet']);
Permission::create(['name' => 'approve snippet']);


$admin->givePermissionTo(['manage users', 'approve snippet']);
$author->givePermissionTo(['create snippet']);

// app/Http/Controllers/Admin/Auth/LoginController.php
namespace App\Http\Controllers\Admin\Auth;


use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;


class LoginController extends Controller
{
  public function showLoginForm()
  {
    return view('admin.auth.login');
  }


  public function login(Request $request)
  {
    $credentials = $request->only('email', 'password');
    if (Auth::guard('admin')->attempt($credentials)) {
      return redirect()->route('admin.dashboard');
    }
    return back()->withErrors(['email' => 'Invalid credentials']);
  }


  public function logout()
  {
    Auth::guard('admin')->logout();
    return redirect()->route('admin.login');
  }
}

// routes/admin.php


Route::middleware(['auth:admin'])->group(function () {
  Route::get('/dashboard', [AdminDashboardController::class, 'index'])
    ->name('admin.dashboard');
});

{{-- admin/dashboard.blade.php --}}
<ul>
  @if(auth()->user()->hasRole('admin'))
    <li><a href="{{ route('admin.users') }}">Manage Users</a></li>
  @endif


  @if(auth()->user()->hasRole('author'))
    <li><a href="{{ route('author.snippets') }}">My Snippets</a></li>
  @endif
</ul>

<span class="px-2 py-1 text-xs rounded-full 
  {{ $role == 'admin' ? 'bg-red-100 text-red-700' : 
    ($role == 'author' ? 'bg-blue-100 text-blue-700' : 'bg-green-100 text-green-700') }}">
  {{ ucfirst($role) }}
</span>

auth()->logoutOtherDevices($request->password);

// routes/web.php
Route::middleware(['auth', 'verified'])->group(function () {
  // protected routes
});