You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
727 B
30 lines
727 B
2 weeks ago
|
<?php
|
||
|
|
|
||
|
|
namespace App\Http\Middleware;
|
||
|
|
|
||
|
|
use App\Models\AdminUser;
|
||
|
|
use Closure;
|
||
|
|
use Illuminate\Http\Request;
|
||
|
|
use Symfony\Component\HttpFoundation\Response;
|
||
|
|
|
||
|
|
class EnsureAdminPermission
|
||
|
|
{
|
||
|
|
public function handle(Request $request, Closure $next, string $permissionCode): Response
|
||
|
|
{
|
||
|
|
$user = $request->user();
|
||
|
|
if (! $user instanceof AdminUser) {
|
||
|
|
return response()->json(['message' => '未授权'], 401);
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($user->isSuperAdmin()) {
|
||
|
|
return $next($request);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (! in_array($permissionCode, $user->permissionCodes(), true)) {
|
||
|
|
return response()->json(['message' => '权限不足'], 403);
|
||
|
|
}
|
||
|
|
|
||
|
|
return $next($request);
|
||
|
|
}
|
||
|
|
}
|