mirror of
https://gitee.com/zoujingli/ThinkAdmin.git
synced 2025-04-05 05:52:43 +08:00
72 lines
2.7 KiB
PHP
72 lines
2.7 KiB
PHP
<?php
|
||
|
||
// +----------------------------------------------------------------------
|
||
// | ThinkAdmin
|
||
// +----------------------------------------------------------------------
|
||
// | 版权所有 2014~2017 广州楚才信息科技有限公司 [ http://www.cuci.cc ]
|
||
// +----------------------------------------------------------------------
|
||
// | 官方网站: http://think.ctolog.com
|
||
// +----------------------------------------------------------------------
|
||
// | 开源协议 ( https://mit-license.org )
|
||
// +----------------------------------------------------------------------
|
||
// | github开源项目：https://github.com/zoujingli/ThinkAdmin
|
||
// +----------------------------------------------------------------------
|
||
|
||
namespace app\admin\middleware;
|
||
|
||
use service\NodeService;
|
||
use think\Db;
|
||
use think\Request;
|
||
|
||
/**
|
||
* 系统权限访问管理
|
||
* Class Auth
|
||
* @package app\admin\middleware
|
||
*/
|
||
class Auth
|
||
{
|
||
/**
|
||
* @param Request $request
|
||
* @param \Closure $next
|
||
* @return mixed
|
||
* @throws \think\db\exception\DataNotFoundException
|
||
* @throws \think\db\exception\ModelNotFoundException
|
||
* @throws \think\exception\DbException
|
||
*/
|
||
public function handle($request, \Closure $next)
|
||
{
|
||
list($module, $controller, $action) = [$request->module(), $request->controller(), $request->action()];
|
||
$access = $this->buildAuth($node = NodeService::parseNodeStr("{$module}/{$controller}/{$action}"));
|
||
// 登录状态检查
|
||
if (!empty($access['is_login']) && !session('user')) {
|
||
$msg = ['code' => 0, 'msg' => '抱歉，您还没有登录获取访问权限！', 'url' => url('@admin/login')];
|
||
return $request->isAjax() ? json($msg) : redirect($msg['url']);
|
||
}
|
||
// 访问权限检查
|
||
if (!empty($access['is_auth']) && !auth($node)) {
|
||
return json(['code' => 0, 'msg' => '抱歉，您没有访问该模块的权限！']);
|
||
}
|
||
// 模板常量声明
|
||
app('view')->init(config('template.'))->assign(['classuri' => NodeService::parseNodeStr("{$module}/{$controller}")]);
|
||
return $next($request);
|
||
}
|
||
|
||
/**
|
||
* 根据节点获取对应权限配置
|
||
* @param string $node 权限节点
|
||
* @return array
|
||
* @throws \think\db\exception\DataNotFoundException
|
||
* @throws \think\db\exception\ModelNotFoundException
|
||
* @throws \think\exception\DbException
|
||
*/
|
||
private function buildAuth($node)
|
||
{
|
||
$info = Db::name('SystemNode')->cache(true, 30)->where(['node' => $node])->find();
|
||
return [
|
||
'is_menu' => intval(!empty($info['is_menu'])),
|
||
'is_auth' => intval(!empty($info['is_auth'])),
|
||
'is_login' => empty($info['is_auth']) ? intval(!empty($info['is_login'])) : 1,
|
||
];
|
||
}
|
||
}
|