Master Laravel Auth With Custom Roles in Just 15 Minutes

Build a secure Laravel authentication system with custom roles in just 15 minutes. No third-party packages, only clean and modern Laravel code.

Master Laravel Auth With Custom Roles in Just 15 Minutes

Laravel 11 is cleaner and faster and so should be your authentication system. Instead of using Spatie or other packages, let’s manually implement custom roles within Laravel's built-in auth in just 15 minutes.

We'll cover:

• User registration

• Role assignment

• Middleware for access control

• Blade checks

• Dashboard access based on role

🔹 Step 1: Create Project and Auth

laravel new laravel-auth-roles

cd laravel-auth-roles

php artisan make:auth

php artisan migrate

Note: If you're using Laravel Breeze or Laravel UI, auth scaffolding will differ slightly.

🔹 Step 2: Add role to Users Table

Edit the migration:

// database/migrations/xxxx_create_users_table.php

$table->string('role')->default('user'); // or 'admin', 'editor'

Run migration again:

php artisan migrate:fresh

🔹 Step 3: Update Registration to Include Role

// app/Http/Controllers/Auth/RegisterController.php

protected function create(array $data)

{

return User::create([

'name' => $data['name'],

'email' => $data['email'],

'password' => Hash::make($data['password']),

'role' => $data['role'] ?? 'user',

]);

}

And in your registration form:

<option value="admin">Admin</option>

</select>

🔹 Step 4: Middleware for Role-Based Access

Create middleware:

php artisan make:middleware RoleMiddleware

Now edit it:

// app/Http/Middleware/RoleMiddleware.php

public function handle($request, Closure $next, $role)

{

if (auth()->check() && auth()->user()->role === $role) {

return $next($request);

}

abort(403, 'Unauthorized.');

}

'role' => \App\Http\Middleware\RoleMiddleware::class,

🔹 Step 5: Create Routes with Role Middleware

// routes/web.php

Route::middleware(['auth', 'role:admin'])->group(function () {

Route::get('/admin/dashboard', fn () => view('admin.dashboard'));

});

Route::middleware(['auth', 'role:user'])->group(function () {

Route::get('/user/dashboard', fn () => view('user.dashboard'));

});

🔹 Blade Role Checks

@if(auth()->user()->role === 'admin')

<a href="/admin/dashboard">Admin Panel</a>

@endif

🔹 Optional: Seeder for Quick Testing

// database/seeders/DatabaseSeeder.php

User::factory()->create([

'name' => 'Admin',

'email' => 'admin@example.com',

'password' => bcrypt('password'),

'role' => 'admin',

]);

User::factory()->create([

'name' => 'User',

'email' => 'user@example.com',

'password' => bcrypt('password'),

'role' => 'user',

]);

Run seeder:

php artisan db:seed

🔹 Security Tip

Always validate the role assignment to prevent users from registering as admins through frontend manipulation.

'role' => in_array($data['role'], ['user', 'admin']) ? $data['role'] : 'user',

🧠 Conclusion

With these simple steps, you've built a full custom Laravel role-based auth system in less than 15 minutes, without relying on external packages. This method is:

• Lightweight

• Fully customizable

• Easy to test and extend

Want to add permissions next? That's your next challenge. 😉

Master Laravel Auth With Custom Roles in Just 15 Minutes