php Laravel的多角色权限中间件

Posted 2021-05-04

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class Role
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     *
     * @return mixed
     */
    public function handle($request, Closure $next, ... $roles)
    {
        $user      = Auth::user();
        
        //dd($roles[$role]);
        foreach ($roles as $role) {
            // Check if user has the role This check will depend on how your roles are set up
            if ($user->role == $role) {
                return $next($request);
            }
        }
    
        return response()->json(['error' => 'Unauthorized'], 403);
    }
}

/*...*/
protected $routeMiddleware = [
        /******/
        'role' => \App\Http\Middleware\Role::class,
        
  ];

Route::get('users', 'UserController@index')->middleware('role:admin,');