Request user not changing using beforeResponseCall

[ferdousanam]

Scribe version

4.22.0

PHP version

8.2.4

Framework

Laravel

Framework version

10.14.1

Scribe config

auth.enabled => true
auth.default => true
auth.name => "token"

What happened?

<?php

namespace App\Providers;

use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\ServiceProvider;
use Knuckles\Camel\Extraction\ExtractedEndpointData;
use Knuckles\Scribe\Scribe;

class ScribeServiceProvider extends ServiceProvider
{
    public function boot()
    {
        if (class_exists(\Knuckles\Scribe\Scribe::class)) {
            Scribe::beforeResponseCall(function (Request $request, ExtractedEndpointData $endpointData) {
                // Get the current URL prefix
                $urlPrefix = $request->route()->getAction('prefix');

                // Check the URL prefix and set the appropriate token
                if ($urlPrefix === 'admin') {
                    $token = User::where('type', 'admin')->first()->createToken('user')->plainTextToken;
                } else {
                    $token = User::where('type', 'staff')->first()->createToken('user')->plainTextToken;
                }

                // Set the Authorization header
                $request->headers->set("Authorization", "Bearer $token");

                // You also need to set the headers in $_SERVER
                $request->server->set("HTTP_AUTHORIZATION", "Bearer $token");
            });
        }
    }
}

When I generate scribe, The request()->user() remains same in the endpoint. But I debugged the request headers The Authorization value is changed.

info($request->url(), array_merge($request->headers->all(), ['user_type' => $request->user() ? $request->user()->type : 'failed']));

NB: I am using "laravel/sanctum": "^3.2", in this case.

Docs

• I've checked the docs, the troubleshooting guide, and existing issues, but I didn't find a solution

[shalvah]

Can you try something like this?

https://github.com/laravel/framework/blob/cddb4f3bb5231f44f18fce304dbf190ad8348ddc/src/Illuminate/Foundation/Testing/Concerns/InteractsWithAuthentication.php#L34

This is what Laravel uses for $this->actingAs($user) in tests.

[ferdousanam]

<?php

namespace App\Providers;

use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\ServiceProvider;
use Knuckles\Camel\Extraction\ExtractedEndpointData;
use Knuckles\Scribe\Scribe;
use Laravel\Sanctum\Sanctum;

class ScribeServiceProvider extends ServiceProvider
{
    public function boot()
    {
        if (class_exists(\Knuckles\Scribe\Scribe::class)) {
            Scribe::beforeResponseCall(function (Request $request, ExtractedEndpointData $endpointData) {
                // Get the current URL prefix
                $urlPrefix = $request->route()->getAction('prefix');

                // Check the URL prefix and set the appropriate token
                if ($urlPrefix === 'admin') {
                    $user = User::where('type', 'admin')->first();
                } else {
                    $user = User::where('type', 'staff')->first();
                }

                Sanctum::actingAs($user, ['*']);
            });
        }
    }
}

Sanctum::actingAs($user, ['*']);

This fixed the issue. But I am confused why this happened using token.

[shalvah]

#580 (comment)