mirror of
https://gitee.com/zoujingli/ThinkAdmin.git
synced 2025-04-06 03:58:04 +08:00
66 lines
2.4 KiB
PHP
66 lines
2.4 KiB
PHP
<?php
|
||
|
||
// +----------------------------------------------------------------------
|
||
// | ThinkAdmin
|
||
// +----------------------------------------------------------------------
|
||
// | 版权所有 2014~2017 广州楚才信息科技有限公司 [ http://www.cuci.cc ]
|
||
// +----------------------------------------------------------------------
|
||
// | 官方网站: http://think.ctolog.com
|
||
// +----------------------------------------------------------------------
|
||
// | 开源协议 ( https://mit-license.org )
|
||
// +----------------------------------------------------------------------
|
||
// | github开源项目：https://github.com/zoujingli/ThinkAdmin
|
||
// +----------------------------------------------------------------------
|
||
|
||
namespace hook;
|
||
|
||
use think\Config;
|
||
use think\exception\HttpResponseException;
|
||
use think\Request;
|
||
use think\View;
|
||
|
||
/**
|
||
* 访问权限管理
|
||
* Class AccessAuth
|
||
* @package hook
|
||
* @author Anyon <zoujingli@qq.com>
|
||
* @date 2017/05/12 11:59
|
||
*/
|
||
class AccessAuth
|
||
{
|
||
|
||
/**
|
||
* 当前请求对象
|
||
* @var Request
|
||
*/
|
||
protected $request;
|
||
|
||
/**
|
||
* 行为入口
|
||
* @param $params
|
||
*/
|
||
public function run(&$params)
|
||
{
|
||
$this->request = Request::instance();
|
||
list($module, $controller, $action) = [$this->request->module(), $this->request->controller(), $this->request->action()];
|
||
$vars = get_class_vars(config('app_namespace') . "\\{$module}\\controller\\{$controller}");
|
||
// 用户登录状态检查
|
||
if ((!empty($vars['checkAuth']) || !empty($vars['checkLogin'])) && !session('user')) {
|
||
if ($this->request->isAjax()) {
|
||
$result = ['code' => 0, 'msg' => '抱歉, 您还没有登录获取访问权限!', 'data' => '', 'url' => url('@admin/login'), 'wait' => 3];
|
||
throw new HttpResponseException(json($result));
|
||
}
|
||
throw new HttpResponseException(redirect('@admin/login'));
|
||
}
|
||
// 访问权限节点检查
|
||
if (!empty($vars['checkLogin']) && !auth("{$module}/{$controller}/{$action}")) {
|
||
$result = ['code' => 0, 'msg' => '抱歉, 您没有访问该模块的权限!', 'data' => '', 'url' => '', 'wait' => 3];
|
||
throw new HttpResponseException(json($result));
|
||
}
|
||
// 权限正常, 默认赋值
|
||
$view = View::instance(Config::get('template'), Config::get('view_replace_str'));
|
||
$view->assign('classuri', strtolower("{$module}/{$controller}"));
|
||
}
|
||
|
||
}
|