Laravel Spatie Permissions角色登录默认页面重定向问题排查

我正在使用Laravel Spatie Permissions扩展，已在roles数据表新增default_route字段，用于为角色分配默认页面。需求是用户登录成功后，若所属角色存在默认页面则重定向至该页面，若无则跳转至默认首页。尝试通过自定义中间件RedirectBasedOnRole实现，但未成功。

环境信息 #

• Laravel版本：10.48.4
• PHP版本：8.1.25

自定义中间件代码（RedirectBasedOnRole.php） #

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class RedirectBasedOnRole
{
    public function handle(Request $request, Closure $next, ...$guards)
    {
        if (Auth::check()) {
            $user = Auth::user();
            if ($user->roles->isNotEmpty()) {
                $defaultRoute = $user->roles->first()->default_route;
                if ($defaultRoute) {
                    return redirect()->route($defaultRoute);
                }
            }
        }
        return $next($request);
    }
}

路由配置（web.php） #

Route::middleware(['auth', 'verified', 'role.redirect'])->group(function () {

    Route::get('/', [DashboardController::class, 'index']);

    Route::prefix('dashboard')->group(function () {
        Route::get('/', [DashboardController::class, 'index'])->name('dashboard');
        Route::get('/trades', [DashboardController::class, 'trades'])->name('dashboard.trades');
        Route::get('/orders', [DashboardController::class, 'orders'])->name('dashboard.orders');
        Route::get('/fetch.dashboard.widget.1', [DashboardController::class, 'fetchDashboardWidget1'])->name('dashboard.widget1');
        Route::get('/fetch.dashboard.widget.2', [DashboardController::class, 'fetchDashboardWidget2'])->name('dashboard.widget2');
        Route::get('/fetch.dashboard.widget.3', [DashboardController::class, 'fetchDashboardWidget3'])->name('dashboard.widget3');
        Route::get('/fetch.dashboard.widget.4', [DashboardController::class, 'fetchDashboardWidget4'])->name('dashboard.widget4');
    });

    Route::prefix('strategies')->group(function () {
        Route::get('/', [StrategiesController::class, 'index'])->name('strategies.index');
        Route::get('/create', [StrategiesController::class, 'create'])->name('strategies.create');
        Route::post('/', [StrategiesController::class, 'store'])->name('strategies.store');
        Route::get('/strategy-files', [StrategiesController::class, 'strategyfiles'])->name('strategyfiles');
        Route::get('/{id}/trades', [TradesController::class, 'strategy'])->name('strategy.trades');
        Route::get('/{id}/orders', [OrdersController::class, 'strategy'])->name('strategy.orders');
        Route::get('/{id}/edit', [StrategiesController::class, 'edit'])->name('strategies.edit');
        Route::put('/{id}', [StrategiesController::class, 'update'])->name('strategies.update');
        Route::delete('/{id}', [StrategiesController::class, 'destroy'])->name('strategies.destroy');
        Route::post('/strategy-files/save', [StrategiesController::class, 'strategyfilesave'])->name('strategyfile.save');
        Route::post('/strategy-files/saveas', [StrategiesController::class, 'strategyfilesaveas'])->name('strategyfile.saveas');
        Route::post('/strategy-files/addnew', [StrategiesController::class, 'strategyfileaddnew'])->name('strategyfile.addnew');
        Route::delete('/strategy-files/{strategyfile}', [StrategiesController::class, 'strategyfiledelete'])->name('strategyfile.delete');
    });
});

错误情况 #

当拥有默认页面设置为strategies的角色用户登录后，出现重定向循环错误。

错误分析及解决方案 #

1. 路由名称不匹配

你的roles表中default_route字段存的是strategies，但实际对应的路由名称是strategies.index（路由配置中Route::get('/', ...)->name('strategies.index')）。调用redirect()->route('strategies')会找不到对应路由，触发错误。

修正： 将roles表中该角色的default_route值改为strategies.index。

2. 中间件挂载位置导致重定向循环

你把role.redirect中间件挂载到了整个认证路由组上，这意味着用户访问任何认证后的路由（包括目标页面strategies.index）时，中间件都会再次触发重定向，形成无限循环。

解决方案有两种：

方案一：重写登录控制器的redirectTo方法（推荐）

不需要自定义中间件，直接在LoginController中重写redirectTo方法，在登录完成时直接处理跳转逻辑：

// app/Http/Controllers/Auth/LoginController.php
protected function redirectTo()
{
    $user = auth()->user();
    
    if ($user->roles->isNotEmpty()) {
        $defaultRoute = $user->roles->first()->default_route;
        // 先检查路由是否存在，避免报错
        if ($defaultRoute && \Illuminate\Support\Facades\Route::has($defaultRoute)) {
            return route($defaultRoute);
        }
    }
    
    // 默认跳转首页
    return '/';
}

方案二：调整中间件应用范围并增加循环判断

• 修改路由配置，只在默认首页路由上应用role.redirect中间件：

// web.php
Route::middleware(['auth', 'verified'])->group(function () {
    // 仅在根路由应用重定向中间件
    Route::get('/', [DashboardController::class, 'index'])->middleware('role.redirect');

    Route::prefix('dashboard')->group(function () {
        // 原有dashboard路由...
    });

    Route::prefix('strategies')->group(function () {
        // 原有strategies路由...
    });
});

• 更新中间件代码，增加路由存在检查和当前路由判断，避免循环：

// RedirectBasedOnRole.php
public function handle(Request $request, Closure $next, ...$guards)
{
    if (Auth::check()) {
        $user = Auth::user();
        if ($user->roles->isNotEmpty()) {
            $defaultRoute = $user->roles->first()->default_route;
            
            if ($defaultRoute && \Illuminate\Support\Facades\Route::has($defaultRoute)) {
                // 如果当前请求已经是目标路由，就不再重定向
                if ($request->route()?->getName() !== $defaultRoute) {
                    return redirect()->route($defaultRoute);
                }
            }
        }
    }
    return $next($request);
}

内容的提问来源于stack exchange，提问作者Adam Adams