@auth with multiple roles

[eljakim]

Because we tend to have projects where multiple roles may have access to specific features, we find ourselves creating a derive BladeOne class, with only the following overriding method:

    protected function compileAuth($expression = ''): string
    {
        $expression = $this->stripParentheses($expression);
        if ($expression) {
            $roles = '"' . implode('","', explode(',', $expression)) . '"';
            return $this->phpTag . "if(isset(\$this->currentUser) && in_array(\$this->currentRole, [$roles])): ?>";
        }
        return $this->phpTag . 'if(isset($this->currentUser)): ?>';
    }

This way we can do this:

     @auth(superadmin,admin)
                <a class="btn btn-outline-primary btn-sm" href="@asset('x/y/edit')">Edit</a>
     @endauth

Would it be possible to allow this in bladeOne out of the box?

[alexander-zierhut]

Have you considered checking auth per permission and not by role?

N roles -> M permissions

Then if you check for "some.feature.edit" it would check if the role has this permission. Multiple roles can have the same permission and you would no longer need the ","

[eljakim]

That sounds like a reasonable thing to investigate, but we've already move to so many custom extension that I have to see if this still makes sense.

[alexander-zierhut]

Makes sense. Your issue is from Nov 1, 2023. I also left the comment so someone else with the same problem might be able to find it :)