[Bug] E-mail verification error

[ma-campbell]

Bug report

What I did

set setup_email_verification_routes to true in config/backpack/base.php

./vendor/bin/sail artisan route:list gives an error:
Undefined array key "signed"

What I expected to happen

route list output

What happened

./vendor/bin/sail artisan route:list

ErrorException

Undefined array key "signed"

at vendor/backpack/crud/src/app/Http/Controllers/Auth/VerifyEmailController.php:23
19▕ * @return void
20▕ */
21▕ public function __construct()
22▕ {
➜ 23▕ if (! app('router')->getMiddleware()['signed'] ?? null) {
24▕ throw new Exception('Missing "signed" alias middleware in App/Http/Kernel.php. More info: https://backpackforlaravel.com/docs/6.x/base-how-to#enable-email-verification-in-backpack-routes');
25▕ }
26▕
27▕ $this->middleware('signed')->only('verifyEmail');

  +1 vendor frames 

2 [internal]:0
Backpack\CRUD\app\Http\Controllers\Auth\VerifyEmailController::__construct()
+12 vendor frames

15 [internal]:0
Illuminate\Foundation\Console\RouteListCommand::Illuminate\Foundation\Console{closure}()

What I've already tried to fix it

comment the 'if'-statement on line 23 in vendor/backpack/crud/src/app/Http/Controllers/Auth/VerifyEmailController.php
and everything works (including the e-mail verification)

Is it a bug in the latest version of Backpack?

After I run composer update backpack/crud the bug... is it still there?
yes

Backpack, Laravel, PHP, DB version

When I run php artisan backpack:version the output is:

PHP VERSION:

8.3.25

PHP EXTENSIONS:

Core, date, libxml, openssl, pcre, zlib, filter, hash, json, pcntl, random, Reflection, SPL, session, standard, sodium, mysqlnd, PDO, xml, bcmath, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, igbinary, imagick, imap, intl, ldap, exif, mongodb, msgpack, mysqli, pcov, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, Phar, posix, readline, shmop, SimpleXML, soap, sockets, sqlite3, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, memcached, redis, swoole, Zend OPcache, xdebug

LARAVEL VERSION:

12.28.1.0

BACKPACK PACKAGE VERSIONS:

backpack/basset: 1.3.9
backpack/crud: 6.8.6
backpack/generators: v4.0.7
backpack/pro: 2.2.36
backpack/theme-coreuiv4: 1.1.6

Additional Information

[backpack-ai-bot]

Thanks for the detailed report. The error “Undefined array key 'signed'” means the “signed” middleware alias is not registered in your app’s HTTP kernel when Backpack initializes the email verification controller. Backpack explicitly checks for that alias and throws if it’s missing. [Base how-to; Community issue 757]

What to do

• Ensure the required middleware aliases exist in your Kernel:
  • For Laravel 10: add both signed and verified aliases as shown below.
  • For Laravel 11+: make sure the equivalent aliases exist in your Http kernel file (the docs note you may need to add them manually if you upgraded).

Example (adapt to your Laravel version):

// app/Http/Kernel.php

// Laravel 10 example from docs:
protected $middlewareAliases = [
    // ... other middleware aliases
    'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
    // If you don't have ValidateSignature, copy it from laravel/laravel:
    // https://github.com/laravel/laravel/blob/10.x/app/Http/Middleware/ValidateSignature.php
    'signed' => \App\Http\Middleware\ValidateSignature::class,
];

Then run migrations if needed and enable the feature:

• Make sure your User implements MustVerifyEmail, and your users table has email_verified_at. [Base how-to]
• Set setup_email_validation_routes => true in config/backpack/base.php. [Base how-to]

Why route:list fails

route:list builds controllers, so constructor checks run in console too; Backpack’s VerifyEmailController checks for the signed alias during construction, hence the error if the alias is missing. This behavior (controllers running during route:list) is expected in Laravel. [Issue 3565]

If you’ve already enabled the feature and still see the error, double-check:

• The signed alias key is exactly 'signed' (no typos) and points to the correct ValidateSignature middleware.
• No custom route overrides are replacing Backpack’s verification routes. [Community issue 757]

If after adding the aliases it still breaks, please share your app/Http/Kernel.php middlewareAliases block and your routes/backpack/base/custom.php so we can spot any mismatch.

ℹ️ Please note our AI Bot does not reply to follow-ups, this will be the only AI answer in this thread. If the AI helped you find the answer, please mark it as answered or write details below so it can learn. Then close the conversation. If not, please give more information for when a human reads this. ℹ️

Relevant sources:

Github Issue (closed): Target class [Backpack\CRUD\app\Http\Middleware\AuthenticateSession] does not exist.
Github Issue (closed): Why is Backpack trying to query the database on route:list command ?
Github Issue (closed): Bug in route:list after installing package
Add email confirmation
Github Issue (closed): [BUG] Users do not have an associated email address.
Github Issue (closed): [Bug] web_middleware list causes errors
Github Issue (closed): [Bug] Auth routes without an email are breaking route:list command
Undefined array key "" when generating user (or any) crud
FAQs for the admin UI|Enable email verification in Backpack routes Part 1
Github Issue (closed): Email verification not working as expected
Github Issue (closed): [Bug] Call to a member function getKey() on null
Github Issue (closed): [Bug] Getting error when "setup_email_verification_routes" is true