94 lines
3.0 KiB
PHP
94 lines
3.0 KiB
PHP
|
<?php
|
|||
|
|
declare (strict_types = 1);
|
|||
|
|
|
|||
|
|
namespace app\admin\middleware;
|
|||
|
|
use think\facade\Db;
|
|||
|
|
use think\facade\Cache;
|
|||
|
|
use think\facade\Session;
|
|||
|
|
use think\Ruquest;
|
|||
|
|
|
|||
|
|
class Auth
|
|||
|
|
{
|
|||
|
|
public function handle($request, \Closure $next)
|
|||
|
|
{
|
|||
|
|
$pathInfo = explode('/',str_replace('.'.$request->ext(),'',$request->pathInfo()));
|
|||
|
|
|
|||
|
|
if(count($pathInfo) !== 2)
|
|||
|
|
{
|
|||
|
|
// 由于中间件里不能正常使用$request->controller()获取用户访问的控制器及方法，因此只能通过pathInfo来获取url并进行截取，但这就要求用户访问时必须输入完整的url，不然就抛出异常
|
|||
|
|
return abort(202, '非法请求,请输入完整的url');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$controller = strtolower($pathInfo[0]);
|
|||
|
|
$action = strtolower($pathInfo[1]);
|
|||
|
|
|
|||
|
|
//验证用户登录
|
|||
|
|
if($controller !== 'publicer')
|
|||
|
|
{
|
|||
|
|
if(!Session::has('adminToken'))
|
|||
|
|
{
|
|||
|
|
return $request->isAjax()?vae_assign(404,'请先登录'):redirect((string)url('/admin/publicer/adminLoginPage'));
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 验证用户访问权限
|
|||
|
|
if($controller !== 'index')
|
|||
|
|
{
|
|||
|
|
if(!$this->checkAuth($controller,$action,Session::get('adminToken')['id']))
|
|||
|
|
{
|
|||
|
|
return $request->isAjax()?vae_assign(202,'你没有权限！'):redirect((string)url('/admin/index/errorShow'));
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return $next($request);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证用户访问权限
|
|||
|
|
* @Author 听雨
|
|||
|
|
* @DateTime 2019-11-21
|
|||
|
|
* @param string $controller 当前访问控制器
|
|||
|
|
* @param string $action 当前访问方法
|
|||
|
|
* @param string $uid 当前用户id
|
|||
|
|
* @return [type]
|
|||
|
|
*/
|
|||
|
|
protected function checkAuth($controller,$action,$uid)
|
|||
|
|
{
|
|||
|
|
// Cache::delete('uRulesSrc'.$uid);
|
|||
|
|
if($uid == 1)
|
|||
|
|
{
|
|||
|
|
// id=1的管理员默认拥有所有权限
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
if(!Cache::get('uRulesSrc'.$uid))
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
//用户所在权限组及所拥有的权限
|
|||
|
|
$uGroupIds = explode(',',Db::name('admin')->where('id',$uid)->value('groups'));
|
|||
|
|
$uRuleIds = Db::name('admin_group')->where('id','IN',$uGroupIds)->where('status',1)->column('rules','id');
|
|||
|
|
|
|||
|
|
$uRules = [];
|
|||
|
|
foreach ($uRuleIds as $k => $v) {
|
|||
|
|
$uRules = array_keys(array_flip($uRules)+array_flip(explode(',',$v)));
|
|||
|
|
}
|
|||
|
|
//用户所拥有的所有权限节点
|
|||
|
|
$uRulesSrc = Db::name('admin_rule')->where('id','in',$uRules)->column('src','id');
|
|||
|
|
Cache::tag('adminRulesSrc')->set('uRulesSrc'.$uid,$uRulesSrc,36000);
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
$uRulesSrc = Cache::get('uRulesSrc'.$uid);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if(!in_array((string)$controller.'/'.$action, $uRulesSrc))
|
|||
|
|
{
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|