代码功能更新

2025-05-18 07:42:27 +00:00
parent 7fc1d422a1
commit 4a90c41da2
2083 changed files with 695218 additions and 3 deletions
@@ -0,0 +1,53 @@
+<?php
+
+namespace app\middleware\admin;
+
+use app\service\admin\AuthServiceFacade;
+use app\service\admin\UserServiceFacade;
+use laytp\BaseMiddleware;
+use think\Request;
+
+class Auth extends BaseMiddleware
+{
+    /**
+     * 执行中间件
+     * @param Request $request
+     * @param \Closure $next
+     * @return mixed
+     */
+    public function handle(Request $request, \Closure $next)
+    {
+        if (AuthServiceFacade::needLogin()) {
+            // 为了兼容windows和linux获取header中驼峰命名的参数修改
+            // windows中，使用原样获取，比如laytpAdminToken
+            // linux中，驼峰需要转换成短横杆获取，比如laytpAdminToken要使用laytp-admin-token来获取
+            $initUser = UserServiceFacade::init($request->header('laytp-admin-token', $request->header('laytpAdminToken', $request->cookie('laytpAdminToken'))));
+            if (!$initUser) return $this->error(UserServiceFacade::getError(), 10401);
+            if (!UserServiceFacade::isLogin()) {
+                if ($request->isAjax()) {
+                    return $this->error('登录信息已过期', 10401);
+                } else {
+                    return redirect('/admin/login.html');
+                }
+            }
+            if (AuthServiceFacade::needAuth()) {
+                $user = UserServiceFacade::getUser();
+                if ($user->is_super_manager !== 1) {
+                    $userId     = $user->id;
+                    $plugin     = defined('LT_PLUGIN') ? LT_PLUGIN : '';
+                    $controller = strtolower(str_replace("\\", ".", $request->controller()));
+                    if ($plugin) {
+                        $node = 'plugin/' . $plugin . '/' . $controller . '/' . $request->action();
+                    } else {
+                        $node = trim(app('http')->getName() . '/' . $controller . '/' . $request->action(),'/');
+                    }
+
+                    if (!AuthServiceFacade::hasAuth($userId, $node)) {
+                        return $this->error('无权请求：/' . $node);
+                    }
+                }
+            }
+        }
+        return $next($request);
+    }
+}