Laravel 6.6 在所有路由上工作的权限中间件

Question

你好我正在做 laravel 项目，当他试图访问一个页面时我必须检查用户的权限，我的问题是在我创建权限中间件并将其添加到 kernel.php，它检查所有路由的权限，即使我没有在任何路由中调用它。我不想在所有路由上应用这个中间件，只是其中的一部分。这是我的权限中间件代码

namespace App\Http\Middleware;

use Closure;
use Session;
use App\Rules;
use Illuminate\Support\Facades\Route;
use URL;

class Permissions  

 { 

   public function handle($request, Closure $next) {

       $rolename=Session::get('rule_name') ;
       $route = $request->path();

       $hasPermission = Rules::where('rule_name', 'superadmin')->where('allowed_pages', 'like', '%' . $route . '%') ->first();

            if (empty($hasPermission)) {

                echo 'Unauthorized.<a href="' . URL::to('/admin') . '">Go Back</a>';

                die();

            }
        }
    }
}

这是我的路线文件

Route::resource('Login', 'LoginController')->name('index','Login');

Route::resource('Backup', 'BackupController')->name('index','Backup');

如你所见，我没有在这些拖车路线上应用中间件，但中间件正在与这些拖车路线一起使用这是我的内核代码

    protected $middlewareGroups = [
    'web' => [
        \App\Http\Middleware\EncryptCookies::class,
        \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
        \Illuminate\Session\Middleware\StartSession::class,
        // \Illuminate\Session\Middleware\AuthenticateSession::class,
        \Illuminate\View\Middleware\ShareErrorsFromSession::class,
        \App\Http\Middleware\VerifyCsrfToken::class,
        \Illuminate\Routing\Middleware\SubstituteBindings::class,
         'Permissions' => \App\Http\Middleware\Permissions::class,
    ],

    'api' => [
        'throttle:60,1',
        'bindings',
    ],
];

我想运行这个中间件只能通过这样的路由

Route::group(['middleware' => 'permissions'], function () {
  Route::resource('Backup', 'BackupController')->name('index','Backup');
}

谢谢你的提前最好的问候

Answer 1

您在 web 中添加了 laravel 的默认中间件，这就是它应用于所有路由的原因。

要注册一个中间件，您需要在 protected $routeMiddleware = [ ] 数组中添加

protected $routeMiddleware = [
    'auth' => \App\Http\Middleware\Authenticate::class,
    'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
    'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
    'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
    'can' => \Illuminate\Auth\Middleware\Authorize::class,
    'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
    'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
    'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
    'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,

    //custom middlewares:
    'Permissions' => \App\Http\Middleware\Permissions::class,
];

然后才

Route::group(['middleware' => 'permissions'], function () {
  Route::resource('Backup', 'BackupController')->name('index','Backup');
}

它会起作用

Answer 2

您将中间件添加到 middelwareGroup web，它将中间件应用于每个传入的请求。

您需要将您的中间件添加到路由中间件数组：docs

// Within App\Http\Kernel Class...

protected $routeMiddleware = [
    'auth' => \App\Http\Middleware\Authenticate::class,
    'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
    ...
    'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,

    // your own middlewares:
    'Permissions' => \App\Http\Middleware\Permissions::class,
];

您可以将中间件应用于特定路由：

Route::resource('Login', 'LoginController')->middleware('Permissions')->name('index','Login');

Laravel 6.6 在所有路由上工作的权限中间件

Permission Middleware with Laravel 6.6 working on all routes

routes

laravel

laravel-middleware