如何使用laravel多重驗證Guard對於同一控制

Question

laravel 5.2

我有以下

 

Admin 
Clients 
Employee 

多個權威性加爾給我有

 
ItemController 
     ->index.blade.php 
     ->create.blade.php 
     ->edit.blade.php 

ItemKitController 
     ->index.blade.php 
     ->create.blade.php 
     ->edit.blade.php 
 

我想用客戶和員工保護訪問上述相同的控制器和視圖。

是他們任何可能的方式。

Answer 1

您可以使用中間件，如：

Route::group([ 'middleware' => ['Admin', 'Clients', 'Employee'] ], function(){ 
    Route::get('/Admin', 'AdminController@index'); 
    Route::get('/Clients', 'ClientsController@index'); 
    Route::get('/Employee', 'EmployeeController@index'); 

}); 

舉例來說，我有一個管理的中間件來檢查，如果用戶ID爲1

<?php 

namespace App\Http\Middleware; 

use Closure; 
use Auth; 
use Log; 

class AuthAdmin 
{ 
    private $admins; // Admin ids 

    /** 
    * Handle an incoming request. 
    * 
    * @param \Illuminate\Http\Request $request 
    * @param \Closure $next 
    * @return mixed 
    */ 
    public function handle($request, Closure $next) 
    { 
     $this->admins = config('custom.admins'); // get configs 
     $user = Auth::user(); 

     if($user->id != 1)){ 
      // not admin, redirect home 
      return redirect('/'); 
     } 

     // is admin, let request continue 
     return $next($request); 
    } 
} 

然後，你必須將它添加到Kernel.php「 $ routeMiddleware「：

protected $routeMiddleware = [ 
     'auth' => \App\Http\Middleware\Authenticate::class, 
     'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class, 
     'can' => \Illuminate\Foundation\Http\Middleware\Authorize::class, 
     'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class, 
     'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class, 

     // Custom Middleware 
     // Auth Admin 
     'auth_admin' => \App\Http\Middleware\AuthAdmin::class, 
    ]; 

然後在我的路線：

Route::group([ 'middleware' => ['auth_admin'] ], function(){ 

    // nobody can come to these routes but admins 
    Route::get('/admin/index', 'AdminController@index'); 
});