How to add a middleware to ALL admin routes?

[realtebo]

I need to apply a custom middleware to all and every single routes which are already under 'auth'.
My goal is to add google 2 factor authentication
i already have a middleware ready
In app\Http\Kernel.php I added a $middlewareAlias

    protected $middlewareAliases = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
        'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class,
        'signed' => \App\Http\Middleware\ValidateSignature::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
        '2fa' => \PragmaRX\Google2FALaravel\Middleware::class,
    ];

then in routes/backpack/custom.php I tried to modify the middleware as

Route::group([
    'prefix'     => config('backpack.base.route_prefix', 'admin'),
    'middleware' => array_merge(
        (array) config('backpack.base.web_middleware', 'web'),
        (array) config('backpack.base.middleware_key', 'admin'),
        ['2fa']
    ),
    'namespace'  => 'App\Http\Controllers\Admin',
]

But It's liltterally doing nothing. As a bare minimum, I was expecting an error because I've not fully configured middleware and db

In the routes list I can see for examples

GET|HEAD  admin/invoice ..................................................................................................................................... invoice.index › Admin\InvoiceCrudController@index
            ⇂ web
            ⇂ admin
            ⇂ PragmaRX\Google2FALaravel\Middleware
            ⇂ Closure

Is all done and should I check what happening in the middleware code or should I do something other to restrict admin routes ALSO under 2fa middleware?

[jcastroa87]

Hello @enabled, as you named, Google 2FA is still not configured. Did you check if it is "enabled" on the config file? You can try to clear the config cache too.

php artisan config:cache

or a full clear

php artisan optimize:clear

Please let me know if this works for you or need any further assistance.

Cheers.

[realtebo]

It was not a route problem. sorry

simply, the user has a NULL google2fa_secret and so the midlleware skips the otp phase.

Sorry