#Livewire Update routes security....

3 messages · Page 1 of 1 (latest)

grim snow
#

If my understanding of livewire is correct...and it likely isn't, but anyway...a page poll or direct livewire update call (RequestPath: livewire/update), uses different routes from a regular request and can therefore bypass middleware. This can be avoided using persisted middleware settings within livewire.

Is Filament v3+ handling this already, particularly for single pages? Or is there a risk that authentication middleware is being by passed by Livewire

upbeat valleyBOT
#

To help others find answers, you can mark your question as solved via Right click solution message -> Apps -> ✅ Mark Solution

icy epoch
#

You can see this by using Laravel Debugbar or Telescope and exactly what middlewears were run 😉