103 lines
3.9 KiB
PHP
103 lines
3.9 KiB
PHP
<?php
|
|
declare (strict_types = 1);
|
|
|
|
namespace app\admin\middleware;
|
|
|
|
use think\facade\Cache;
|
|
use think\facade\Db;
|
|
use think\facade\Session;
|
|
|
|
class Auth
|
|
{
|
|
public function handle($request, \Closure $next)
|
|
{
|
|
//获取模块名称
|
|
$controller = app('http')->getName();
|
|
$pathInfo = str_replace('.' . $request->ext(), '', $request->pathInfo());
|
|
$action = explode('/', $pathInfo)[0];
|
|
// var_dump($pathInfo);
|
|
//验证用户登录
|
|
if ($action !== 'login') {
|
|
$session_admin = get_config('app.session_admin');
|
|
if (!Session::has($session_admin)) {
|
|
return $request->isAjax() ? to_assign(404, '请先登录') : redirect((string) url('/admin/login/index'));
|
|
}
|
|
|
|
// 验证用户访问权限
|
|
if ($action !== 'index' && $action !== 'api') {
|
|
if (!$this->checkAuth($controller, $pathInfo, $action, Session::get($session_admin)['id'])) {
|
|
if($request->isAjax()){
|
|
return to_assign(202, '你没有权限,请联系超级管理员！');
|
|
}
|
|
else{
|
|
echo '<div style="text-align:center;color:red;margin-top:20%;">您没有权限,请联系超级管理员</div>';exit;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return $next($request);
|
|
}
|
|
|
|
/**
|
|
* 验证用户访问权限
|
|
* @DateTime 2020-12-21
|
|
* @param string $controller 当前访问控制器
|
|
* @param string $action 当前访问方法
|
|
* @param string $uid 当前用户id
|
|
* @return [type]
|
|
*/
|
|
protected function checkAuth($controller, $pathInfo, $action, $uid)
|
|
{
|
|
//Cache::delete('RulesSrc' . $uid);
|
|
if ($uid == 1) {
|
|
// id=1的管理员默认拥有所有权限
|
|
return true;
|
|
} else {
|
|
if (!Cache::get('RulesSrc' . $uid) || !Cache::get('RulesSrc0')) {
|
|
//用户所在权限组及所拥有的权限
|
|
// 执行查询
|
|
$user_groups = Db::name('admin_group_access')
|
|
->alias('a')
|
|
->join("admin_group g", "a.group_id=g.id", 'LEFT')
|
|
->where("a.uid='{$uid}' and g.status='1'")
|
|
->select()
|
|
->toArray();
|
|
$groups = $user_groups ?: [];
|
|
|
|
$ids = []; //保存用户所属用户组设置的所有权限规则id
|
|
foreach ($groups as $g) {
|
|
$ids = array_merge($ids, explode(',', trim($g['rules'], ',')));
|
|
}
|
|
$ids = array_unique($ids);
|
|
//读取所有权限规则
|
|
$rules_all = Db::name('admin_rule')->field('src')->select();
|
|
//读取用户组所有权限规则
|
|
$rules = Db::name('admin_rule')->where('id', 'in', $ids)->field('src')->select();
|
|
//循环规则，判断结果。
|
|
$auth_list_all = [];
|
|
$auth_list = [];
|
|
foreach ($rules_all as $rule_all) {
|
|
$auth_list_all[] = strtolower($rule_all['src']);
|
|
}
|
|
foreach ($rules as $rule) {
|
|
$auth_list[] = strtolower($rule['src']);
|
|
}
|
|
//规则列表结果保存到Cache
|
|
Cache::tag('adminRules')->set('RulesSrc0', $auth_list_all, 36000);
|
|
Cache::tag('adminRules')->set('RulesSrc' . $uid, $auth_list, 36000);
|
|
} else {
|
|
$auth_list_all = Cache::get('RulesSrc0');
|
|
$auth_list = Cache::get('RulesSrc' . $uid);
|
|
}
|
|
if (!in_array((string) $controller . '/' . $pathInfo, $auth_list_all)) {
|
|
return true;
|
|
}
|
|
else{
|
|
if (!in_array((string) $controller . '/' . $pathInfo, $auth_list)) {
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|