Multi Auth Laravel 5.4 仅使用两个中间件

Question

我想创建两个中间件来重定向经过身份验证的用户，如果是管理员，它将被重定向到后台，否则它将被重定向到简单用户的简单仪表板。

但我只想使用 users 表而不为管理员添加另一个表。

RedirectIfAuthenticated.php

<?php

 class RedirectIfAuthenticated
{
/**
 * Handle an incoming request.
 *
 * @param  \Illuminate\Http\Request  $request
 * @param  \Closure  $next
 * @param  string|null  $guard
 * @return mixed
 */
public function handle($request, Closure $next, $guard = null)
{
    if (Auth::guard($guard)->check()) {
        if (Auth::user()->role_id == 1)
        {
            return redirect('/admin/home');
        }
        return redirect('/dashboard');
    }

    return $next($request);
}
}

DashboardController.php

class DashboardController extends Controller
{

/**
 * Display a listing of the resource.
 *
 * @return \Illuminate\Http\Response
 */
public function index()
{
    return view('authFront.layoutAuthenticatedUser.dashboard');
}


}

web.php

    Route::get('/us-admin', function () { return redirect('/admin/home');    })->name('admin.dashboard');

   // Authentication Routes...
   $this->get('login',    'Auth\LoginController@showLoginForm')->name('auth.login');
    $this->post('login', 'Auth\LoginController@login')->name('auth.login');
   $this->post('register', 'Auth\RegisterController@register')->name('auth.register');

   $this->post('logout', 'Auth\LoginController@logout')->name('auth.logout');


   // Change Password Routes...
   $this->get('change_password',   'Auth\ChangePasswordController@showChangePasswordForm')->name('auth.change_password');
   $this->patch('change_password', 'Auth\ChangePasswordController@changePassword')->name('auth.change_password');

   // Password Reset Routes...
   $this->get('password/reset', 'Auth\ForgotPasswordController@showLinkRequestForm')->name('auth.password.reset');
   $this->post('password/email', 'Auth\ForgotPasswordController@sendResetLinkEmail')->name('auth.password.reset');
  $this->get('password/reset/{token}', 'Auth\ResetPasswordController@showResetForm')->name('password.reset');
  $this->post('password/reset', 'Auth\ResetPasswordController@reset')->name('auth.password.reset');

   Route::group(['middleware' => ['auth'], 'prefix' => 'admin', 'as' => 'admin.'], function () {
    Route::get('/home', 'HomeController@index');

});
   Route::get('/dashboard', 'DashboardController@index');

Answer 1

在这种情况下，您需要建立用户角色，或者在用户表中为 is_admin 设置一个可选的布尔字段。然后在中间件中它只是这样的：

class RedirectIfNotAdmin
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if (!Auth::user()->admin()) {
            return redirect()->to('user-dashboard');
        }
        return $next($request);
    }
}

因此，在您的情况下，我将为每个角色授权后创建一个单独的中间件。然后，您可以将 AdminMiddleware 应用于所有以“admin”为前缀的路由，将 SimpleUserMiddleware 应用于所有其他路由。

Answer 2

您可以简单地检查RedirectIfAuthenticated 中间件中默认已经存在的角色，并通过创建管理中间件来限制路由

在app/Http/Middleware/RedirectIfAuthenticated.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class RedirectIfAuthenticated
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $guard
     * @return mixed
     */
    public function handle($request, Closure $next, $guard = null)
    {
        if (Auth::guard($guard)->check()) {
            if (Auth::user()->role_id == 1)
            {
                return redirect('/admin/home');    
            }
            return redirect('/dashboard');
        }

        return $next($request);
    }
}

在app/Http/Middleware/AuthenticateAdmin.php

<?php

namespace App\Http\Middleware;

use Closure;
use Auth;

class AuthenticateAdmin
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (!Auth::check() || Auth::user()->role_id != 1)
        {
            if ($request->ajax())
            {
                return response('Unauthorized.', 401);
            }
            else
            {
                return redirect()->guest('login');
            }
        }
        return $next($request);
    }
}

在app/Http/Kernal.php 中添加这一行到$routeMiddleware 数组中

'admin' => \App\Http\Middleware\AuthenticateAdmin::class,

在routes/web.php

Route::middleware('admin')->prefix('admin')->group(function() {
    Route::get('/home', 'HomeController@index')->name('admin.home');
});

在app/Http/Controllers/Auth/LoginController.php添加这个函数

protected function authenticated(Request $request, $user)
{
    if ($user->role_id == 1) {
        return redirect()->intended(route('admin.home'));
    }
    return redirect()->intended(route('dashboard'));
}   

希望对你有帮助