infinite login loop when i try to login

[lucaruboni]

Package

Panel builder

Package Version

3.2.124

How can we help you?

from when I update my project i can't login , everytime I click or sometime I only open in local my route to /admin/login i see the network make infinite request to login .
if I cancel authenticate middleware the loops stop but i can't login without a livewire 419 error.
Do someone had the same problem and solved it in a safe way?
I'm tryna use a custom middleware to authenticate but i got the same loop

I can't get any log error
I can't get any console error

"filament : 3.2.124"
"livewire/livewire": "^3.4",

AdminPanelProvider.php

<?php

namespace App\Providers\Filament;
use App\Http\Middleware\CustomAuthenticate;
use Filament\Http\Middleware\DisableBladeIconComponents;
use Filament\Http\Middleware\DispatchServingFilamentEvent;
use Filament\Pages;
use Filament\Panel;
use Filament\PanelProvider;
use Filament\Support\Colors\Color;
use Filament\navigation\MenuItem;
use Filament\Widgets;
use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
use Illuminate\Cookie\Middleware\EncryptCookies;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
use Illuminate\Routing\Middleware\SubstituteBindings;
use Illuminate\Session\Middleware\AuthenticateSession;
use Illuminate\Session\Middleware\StartSession;
use Illuminate\View\Middleware\ShareErrorsFromSession;
use Swis\Filament\Backgrounds\FilamentBackgroundsPlugin;
use Swis\Filament\Backgrounds\ImageProviders\MyImages;
use App\Filament\Widgets\LinkClicksWidget;
use App\Filament\Widgets\TotalClicksWidget;
use Joaopaulolndev\FilamentEditProfile\FilamentEditProfilePlugin;
use Joaopaulolndev\FilamentEditProfile\Pages\EditProfilePage;
use Hydrat\TableLayoutToggle\TableLayoutTogglePlugin;
use BezhanSalleh\FilamentShield\FilamentShieldPlugin;

class AdminPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
            ->default()
            ->id('admin')
            ->path('admin')
            ->login()
            ->passwordReset()
            ->viteTheme('resources/css/filament/admin/theme.css')
            ->colors([
                'primary' => '#869120',
                'success' => Color::Emerald,
                'danger' => '#B91C1C',
                'warning' => '#A35D48',
                'info' => '#2D8C8C',
                'gray' => '#5D5E5C',
            ])
            ->font('Cabin')
            ->brandLogo(asset('storage/logo-Borgo-Germoglio.png'))
            ->darkModeBrandLogo(asset('storage/logo-Borgo-Germoglio-avorio.png'))
            ->brandLogoHeight('8vh')
            ->favicon(asset('storage/favicon.png'))
            ->sidebarCollapsibleOnDesktop()
            ->discoverResources(in: app_path('Filament/Resources'), for: 'App\\Filament\\Resources')
            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\\Filament\\Pages')
            ->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\\Filament\\Widgets')
            ->widgets([

            ])
            ->plugins([
                FilamentBackgroundsPlugin::make()
                    ->showAttribution(false),
                FilamentEditProfilePlugin::make()
                    ->slug('my-profile')
                    ->setTitle('My Profile')
                    ->setIcon('heroicon-o-user')
                    ->setNavigationLabel('My Profile')
                    ->setSort(9)
                    ->shouldShowDeleteAccountForm(true)
                    ->shouldShowSanctumTokens(false)
                    ->shouldShowBrowserSessionsForm(true)
                    ->shouldShowAvatarForm(
                            value: true,
                            directory: 'avatars'
                        ),
                TableLayoutTogglePlugin::make()
                    ->setDefaultLayout('grid')
                    ->displayToggleAction() // used to display the toggle action button automatically
                    ->toggleActionHook('tables::toolbar.search.after') // chose the Filament view hook to render the button on
                    ->listLayoutButtonIcon('heroicon-o-list-bullet')
                    ->gridLayoutButtonIcon('heroicon-o-squares-2x2'),
                    
                FilamentShieldPlugin::make(),
            ])
            ->middleware([
                'web', // Include il gruppo middleware 'web' per sessioni, CSRF e cookie.
                \App\Http\Middleware\CustomAuthenticate::class, // Middleware di autenticazione personalizzato.
                \Illuminate\Routing\Middleware\SubstituteBindings::class, // Gestisce il binding automatico delle route.
                \Filament\Http\Middleware\DisableBladeIconComponents::class, // Disabilita Blade icon components (Filament).
                \Filament\Http\Middleware\DispatchServingFilamentEvent::class, // Emette eventi di rendering di Filament.
            ])
            ->authMiddleware([
                \App\Http\Middleware\CustomAuthenticate::class, // Utilizza il middleware personalizzato per autenticare gli utenti.
            ])

            ->userMenuItems([
                'profile' => MenuItem::make()
                    ->label(fn () => auth()->user()->name)
                    ->url(fn (): string => EditProfilePage::getUrl())
                    ->icon('heroicon-s-user'),
            ]);
    }


}

CustomAuthenticate.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;
use Filament\Facades\Filament;

class CustomAuthenticate
{
    public function handle($request, Closure $next, ...$guards)
    {
        if (Auth::guard()->guest()) {
            if ($request->expectsJson()) {
                return response()->json(['message' => 'Non autorizzato'], 401);
            }

            return redirect(Filament::getLoginUrl());
        }

        return $next($request);
    }
}

kernel.php

<?php

namespace App\Http;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel
{
    /**
     * The application's global HTTP middleware stack.
     *
     * These middleware are run during every request to your application.
     *
     * @var array<int, class-string|string>
     */
    protected $middleware = [
        // \App\Http\Middleware\TrustHosts::class,
        \App\Http\Middleware\TrustProxies::class,
        \Illuminate\Http\Middleware\HandleCors::class,
        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
        \App\Http\Middleware\TrimStrings::class,
        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
    ];

    /**
     * The application's route middleware groups.
     *
     * @var array<string, array<int, class-string|string>>
     */
    protected $middlewareGroups = [
        'web' => [
            \App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        ],

        'api' => [
            
            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
            \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
            
        ],
    ];

    /**
     * The application's middleware aliases.
     *
     * Aliases may be used instead of class names to conveniently assign middleware to routes and groups.
     *
     * @var array<string, class-string|string>
     */
    protected $middlewareAliases = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        'custom_auth' => \App\Http\Middleware\CustomAuthenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
        'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class,
        'signed' => \App\Http\Middleware\ValidateSignature::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
        'auth.debug' => \App\Http\Middleware\DebugAuthentication::class,
    ];

}

env

BROADCAST_DRIVER=log CACHE_DRIVER=file FILESYSTEM_DISK=local QUEUE_CONNECTION=sync SESSION_DRIVER=file SESSION_LIFETIME=120 SESSION_DOMAIN=127.0.0.1

[lucaruboni]

config/filament.php

`<?php

return [

/*
|--------------------------------------------------------------------------
| Broadcasting
|--------------------------------------------------------------------------
|
| By uncommenting the Laravel Echo configuration, you may connect Filament
| to any Pusher-compatible websockets server.
|
| This will allow your users to receive real-time notifications.
|
*/

'broadcasting' => [

    // 'echo' => [
    //     'broadcaster' => 'pusher',
    //     'key' => env('VITE_PUSHER_APP_KEY'),
    //     'cluster' => env('VITE_PUSHER_APP_CLUSTER'),
    //     'wsHost' => env('VITE_PUSHER_HOST'),
    //     'wsPort' => env('VITE_PUSHER_PORT'),
    //     'wssPort' => env('VITE_PUSHER_PORT'),
    //     'authEndpoint' => '/broadcasting/auth',
    //     'disableStats' => true,
    //     'encrypted' => true,
    //     'forceTLS' => true,
    // ],

],

/*
|--------------------------------------------------------------------------
| Default Filesystem Disk
|--------------------------------------------------------------------------
|
| This is the storage disk Filament will use to store files. You may use
| any of the disks defined in the `config/filesystems.php`.
|
*/

'default_filesystem_disk' => env('FILAMENT_FILESYSTEM_DISK', 'public'),

/*
|--------------------------------------------------------------------------
| Assets Path
|--------------------------------------------------------------------------
|
| This is the directory where Filament's assets will be published to. It
| is relative to the `public` directory of your Laravel application.
|
| After changing the path, you should run `php artisan filament:assets`.
|
*/

'assets_path' => null,

/*
|--------------------------------------------------------------------------
| Cache Path
|--------------------------------------------------------------------------
|
| This is the directory that Filament will use to store cache files that
| are used to optimize the registration of components.
|
| After changing the path, you should run `php artisan filament:cache-components`.
|
*/

'cache_path' => base_path('bootstrap/cache/filament'),

/*
|--------------------------------------------------------------------------
| Livewire Loading Delay
|--------------------------------------------------------------------------
|
| This sets the delay before loading indicators appear.
|
| Setting this to 'none' makes indicators appear immediately, which can be
| desirable for high-latency connections. Setting it to 'default' applies
| Livewire's standard 200ms delay.
|
*/

'livewire_loading_delay' => 'default',
 
'styles' => [
    'css/admin.css', // Assicurati che il percorso sia corretto
],
'auth' => [
    'guard' => 'web', // Assicurati che usi il guard corretto
    'login' => '/admin/login',
    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => App\Models\User::class,
        ],
    ],
],
'middleware' => [
'auth' => [\Filament\Http\Middleware\Authenticate::class],
'base' => [
    \Illuminate\Session\Middleware\StartSession::class,
    \Illuminate\View\Middleware\ShareErrorsFromSession::class,
    \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class,
    \Illuminate\Routing\Middleware\SubstituteBindings::class,
    \Filament\Http\Middleware\DispatchServingFilamentEvent::class,
],

],

];
`