1

2025-11-21 01:42:54 +08:00
parent ff026c6f32
commit f89196c73c
1953 changed files with 9 additions and 15246 deletions
@@ -0,0 +1,63 @@
+<?php
+
+namespace plugin\admin\app\middleware;
+
+use plugin\admin\api\Auth;
+use ReflectionException;
+use support\exception\BusinessException;
+use Webman\Http\Request;
+use Webman\Http\Response;
+use Webman\MiddlewareInterface;
+
+class AccessControl implements MiddlewareInterface
+{
+    /**
+     * @param Request $request
+     * @param callable $handler
+     * @return Response
+     * @throws ReflectionException|BusinessException
+     */
+    public function process(Request $request, callable $handler): Response
+    {
+        $controller = $request->controller;
+        $action = $request->action;
+        $request->controller_name = get_controller_name();
+        $request->action_name = get_action_name();
+
+        $code = 0;
+        $msg = '';
+        if (!Auth::canAccess($controller, $action, $code, $msg)) {
+            if ($request->expectsJson()) {
+                $response = json(['code' => $code, 'msg' => $msg, 'data' => []]);
+            } else {
+                if ($code === 401) {
+                    $response = response('<script>    if (self !== top) {        parent.location = "/app/admin";    }</script>',401);
+                    //$response = response('',301, ['Location'=> '/app/admin/index/index']);
+                } else {
+                    $request->app = '';
+                    $request->plugin = 'admin';
+                    $response = view('common/403')->withStatus(403);
+                }
+            }
+        } else {
+            $config = Config('site');
+            $config['debug'] = config('app.debug');
+            $config['controller'] = $request->controller_name;
+            $config['action'] = $request->action_name;
+            $config['moduleurl'] = '/app/admin';
+            $request->_view_vars = array_merge((array) $request->_view_vars,[
+                'user'      =>  session('admin'),
+                'config'    =>  $config
+            ]);
+            $response = $request->method() == 'OPTIONS' ? response('') : $handler($request);
+            $response->withBody(str_replace([
+                '__SELF__'
+            ],[
+                request()->path()
+                //url(request()->action)
+            ],$response->rawBody()))->getStatusCode();
+        }
+
+        return $response;
+    }
+}