blackteay/ThinkAdmin
1
0
Fork 0
mirror of https://gitee.com/zoujingli/ThinkAdmin.git synced 2025-04-06 03:58:04 +08:00
Code Issues Projects Releases Wiki Activity

[更新]ComposerUpdate

Browse Source
This commit is contained in:
Anyon 2019-04-18 13:28:49 +08:00
parent 2dad9ba856
commit 788e39ae36
3 changed files with 22 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
application/admin/controller/api/Plugs.php
View File

@ -16,7 +16,6 @@ namespace app\admin\controller\api;
use library\Controller;
use library\File;
use think\Db;
/**
* 后台插件管理

35
application/admin/service/Auth.php
View File

@ -25,40 +25,7 @@ use think\Db;
*/
class Auth
{
/**
* 权限检查中间件入口
* @param \think\Request $request
* @param \Closure $next
* @return mixed
* @throws \think\Exception
* @throws \think\db\exception\DataNotFoundException
* @throws \think\db\exception\ModelNotFoundException
* @throws \think\exception\DbException
* @throws \think\exception\PDOException
*/
public function handle(\think\Request $request, \Closure $next)
{
// 系统消息处理
if (($code = $request->get('messagecode')) > 0) Message::set($code);
// 节点忽略跳过
$node = Node::current();
foreach (self::getIgnore() as $str) if (stripos($node, $str) === 0) return $next($request);
// 节点权限查询
$auth = Db::name('SystemNode')->cache(true, 60)->field('is_auth,is_login')->where(['node' => $node])->find();
$info = ['is_auth' => $auth['is_auth'], 'is_login' => $auth['is_auth'] ? 1 : $auth['is_login']];
// 登录状态检查
if (!empty($info['is_login']) && !self::isLogin()) {
$message = ['code' => 0, 'msg' => '抱歉，您还没有登录获取访问权限！', 'url' => url('@admin/login')];
return $request->isAjax() ? json($message) : redirect($message['url']);
}
// 访问权限检查
if (!empty($info['is_auth']) && !self::checkAuthNode($node)) {
return json(['code' => 0, 'msg' => '抱歉，您没有访问该模块的权限！']);
}
return $next($request);
}
/**
* 权限节点忽略规则
* @return array

23
application/admin/sys.php
View File

@ -107,5 +107,24 @@ if (!function_exists('base64_image')) {
}
}
// 注册中间键
\think\facade\Middleware::add('app\admin\service\Auth');
// 系统权限检查中间键
\think\facade\Middleware::add(function (\think\Request $request, \Closure $next) {
// 系统消息处理
if (($code = $request->get('messagecode')) > 0) \app\admin\service\Message::set($code);
// 节点忽略跳过
$node = \library\tools\Node::current();
foreach (\app\admin\service\Auth::getIgnore() as $str) if (stripos($node, $str) === 0) return $next($request);
// 节点权限查询
$auth = \think\Db::name('SystemNode')->cache(true, 60)->field('is_auth,is_login')->where(['node' => $node])->find();
$info = ['is_auth' => $auth['is_auth'], 'is_login' => $auth['is_auth'] ? 1 : $auth['is_login']];
// 登录状态检查
if (!empty($info['is_login']) && !\app\admin\service\Auth::isLogin()) {
$message = ['code' => 0, 'msg' => '抱歉，您还没有登录获取访问权限！', 'url' => url('@admin/login')];
return $request->isAjax() ? json($message) : redirect($message['url']);
}
// 访问权限检查
if (!empty($info['is_auth']) && !\app\admin\service\Auth::checkAuthNode($node)) {
return json(['code' => 0, 'msg' => '抱歉，您没有访问该模块的权限！']);
}
return $next($request);
});