Skip to content

Middleware

Everything under Quiote\Security\Auth\Middleware.

ClassDescription
SessionAuthenticationMiddlewareRuns the session/form-login firewall’s authenticator chain in before_action, after Quiote\Middleware\RoutingMiddleware (so SecurityUser is already rehydrated) and before Quiote\Middleware\SecurityMiddleware (so a successful login is visible to the authZ decision made later in the same request).
StatelessAuthenticationMiddlewareRuns stateless firewalls’ authenticator chains (HTTP Basic, and — once packages/auth-jwt is installed — bearer/JWT) before routing and before Quiote\Middleware\SessionMiddleware, matching firewalls by request path.