Laravel中管理员登出后如何保留并复用会话值给普通用户？

Hey there! Let's tackle this problem head-on. The root issue here is that when your admin logs out, the $request->session()->invalidate() call destroys their own session entirely—so any values stored in that session (like the target value you want to share with regular users) get wiped out too.

To fix this, we need to separate the shared target value from the admin's personal session. Here are two practical approaches:

1. Store the shared value in a persistent cache or database #

Instead of keeping the target value in the admin's session, save it to a cache (like Redis or Laravel's file cache) or a dedicated database table, then share a unique identifier for that value with your regular users. This way, the value stays intact even after the admin logs out.

Example code for the admin side (when creating the shared value): #

use Illuminate\Support\Str;
use Illuminate\Support\Facades\Cache;

// When the admin creates the shared session/value
$targetValue = "Your specific target data";
$uniqueToken = Str::random(32); // Generate a secure unique token

// Store the value in cache with an expiration (adjust the timeframe as needed)
Cache::put("shared_session:$uniqueToken", $targetValue, now()->addDays(7));

// Pass this token to the regular user—via a link, email, or system notification
// e.g., send them a link like https://your-app.com/use-shared-value?token=$uniqueToken

Example code for the regular user side (retrieving the value): #

use Illuminate\Support\Facades\Cache;

// Retrieve the token from the request (e.g., URL parameter)
$token = request()->query('token');

// Fetch the shared value from cache
$sharedValue = Cache::get("shared_session:$token");

if ($sharedValue) {
    // Use the shared value as needed
} else {
    // Handle expired or invalid token
}

2. Directly save the value to the target user's session (if applicable) #

If the shared value is meant for a specific regular user, you can store it directly in their session instead of the admin's. This works if the user is already logged in, or you can associate it with their user ID.

Example code (admin side): #

use Illuminate\Support\Facades\Cache;

// Get the target regular user (assuming you have their ID)
$targetUser = \App\Models\User::find($regularUserId);

// Store the value tied to the user's ID
Cache::put("user_shared_value:$targetUser->id", $targetValue, now()->addDays(7));

Then, when the regular user logs in, they can retrieve the value using their own user ID—no dependency on the admin's session at all.

Key note about your current logout code #

Your existing logout logic is fine for the admin's session management—$this->guard()->logout() clears their authentication, and $request->session()->invalidate() destroys their session data. The problem was just storing shared data in the wrong place. By moving the target value to a persistent, user-agnostic storage, you avoid losing it when the admin logs out.

内容的提问来源于stack exchange，提问作者Adil