这段代码在 Laravel 中用作中间件,只允许具有特定权限的用户做某事,并且它正在工作,但我真的不明白它是如何工作的? 谁能逐行解释一下这段代码吗?
此中间件代码称为(AuthGates)
public function handle($request, Closure $next)
{
$user = Auth::user();
//add all permission
if ($user) {
$roles = Role::with('permissions')->get();
$permissionsArray = [];
foreach ($roles as $role) {
foreach ($role->permissions as $permissions) {
$permissionsArray[$permissions->title][] = $role->id;
}
}
foreach ($permissionsArray as $title => $roles) {
Gate::define($title, function ($user) use ($roles) {
return count(array_intersect($user->roles->pluck('id')->toArray(), $roles)) > 0;
});
}
}
return $next($request);
}
然后在Kernal中调用这个类:
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
\Laravel\Jetstream\Http\Middleware\AuthenticateSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
\Illuminate\Routing\Middleware\SubstituteBindings::class,
AuthGates::class
],
之后,在blade.php文件中使用它来显示一个链接,例如仅针对拥有此权限(例如(work_access)权限)的人:
@can('work_access')
link here or any html parts we want to protect.....
@endcan
试试这个:
\App\Http\Middleware\AuthGates::class,