Laravel how to make your authorization

Laravel allows you to create its own authorization using simple steps and example.

Implementing Authorization in Laravel

Authorization is an important feature for any application. It allows you to control who has access to certain areas of your application and can also be used to control who has access to certain data. In Laravel, authorization is handled via the Gates and Policies classes.

Gates are used to determine if a user is allowed to perform a certain action. They are defined in the AuthServiceProvider class. The define method of the Gates class is used to define a new gate. The first parameter is the name of the gate and the second parameter is a closure that accepts the user and returns a boolean indicating if the user is allowed to perform the action or not:

Gate::define('edit-post', function (User $user, Post $post) {
    return $user->id === $post->user_id;
});

The Gates class also provides several convenient methods such as allows and denies which can be used to quickly allow or deny access. For example, we can allow all authenticated users to view a post by using the allows method:

Gate::allows('view-post', function (User $user, Post $post) {
    return Auth::check();
});

Policies can be used to group similar authorization logic together. They are defined in the AppPolicies directory. Each policy corresponds to a model in your application and contains several methods that can be used to determine if a user is allowed to perform a certain action or not. For example, we can create a PostPolicy class that contains a view method which determines if a user is allowed to view a post or not:

public function view(User $user, Post $post)
{
    return $user->id === $post->user_id;
}

The authorize method of the Controller class can be used to authorize an action. The first parameter is the name of the action and the second parameter is the model that should be passed to the gate or policy:

public function show(Post $post)
{
    $this->authorize('view', $post);

    // The current user is authorized to view the post...
}

Laravel makes it easy to implement authorization in your application by providing a simple and straightforward API. Gates and policies are used to determine if a user is allowed to perform a certain action or not. The authorize method of the Controller class is used to authorize an action.