保护Laravel 5.1中的路线

Question

I am using Laravel 5.1 for my project. I am trying to secure Routes and make sure only logged in user can access certain routes. I am aware about middlewares but I am wondering if anyone post an example or a link explaining about middleware and how to protect a page using middleware.

Thanks

Answer 1

You are correct about using middleware. The included Auth middleware is what you should use, as long as you are also using the included Auth controller to authenticate users. You would write your route like this:

Route::get('/page', array(
    'uses' => 'Controller@method',
    'middleware'=>'auth'
));

(The above example is using a GET request, but it could other request types, like POST for example).

This will use the default behavior of the middleware which checks to see if the user is logged in (authenticated). You can also extend or overwrite the built-in functions to allow you to direct the application on where to send the user if they are or are not logged in, etc. Laravel's official documentation is a good starting point: link

Answer 2

To build on the answer given by Joe Rose, you can also specify the middleware in your controller rather than in your routes.php file.

Eg you could have your routes set out like

Route::get('/example', 'ExampleController@index');
Route::post('/example/post', 'ExampleController@post');
Route::resource('blog', 'BlogController');

And then inside your controller reference it like so:

class ExampleController extends Controller
{
    public function __construct()
        {
            $this->middleware('auth');
        }
    //....

If you're looking for more info, check out the link to the docs Joe gave, and also this blog post which explains what middleware is really well and how to create your own if you need to.