Laravel所有者中间件不起作用

Question

I created a middleware (app/Http/Middleware/AbortIfNotOwner.php), this is code from another Stackoverflow post

<?php

namespace App\Http\Middleware;

use Closure;
use DB;

class AbortIfNotOwner
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string    $resourceName
     * @return mixed
     */

    public function handle($request, Closure $next, $resourceName)
    {
        $resourceId = $request->route()->parameter($resourceName);

        $user_id = \DB::table($resourceName)->find($resourceId)->user_id;

        if ($request->user()->id != $user_id) {
            abort(403, 'Unauthorized action.');
        }

        return $next($request);
    }
}

I register it in the app\\Http\\Kernel.php

protected $routeMiddleware = [
     'owner' => 'App\Http\Middleware\AbortIfNotOwner',
];

and in my route file I have:

Route::group(['middleware' => ['owner:bids']], function() {
        Route::get('user/{id}/bids', ['as' => 'buyer_bids', 'uses' => 'User\Buyer\BidsController@getBidsPerUser']);
    });

When I run this code I get an

ErrorException in AbortIfNotOwner.php line 23: Trying to get property of non-object

This refers to the following lines in the middleware:

> $resourceId = $request->route()->parameter($resourceName);
> $user_id = \DB::table($resourceName)->find($resourceId)->user_id;

The issue seems to be that resourceId is null I think. I do have a field user_id in the bids table, so am not sure what is wrong. The route URL is like /user/2/bids.

EDIT - SOLVED

I found that the below works:

 $user_id = \DB::table($resourceName)->find($request->id)->user_id;

instead of

 $resourceId = $request->route()->parameter($resourceName);
 $user_id = \DB::table($resourceName)->find($resourceId)->user_id;

This works with the routes like

Route::get('/{id}/bids'

EDIT - SOLVED - Other solution

$resourceId = $request->route()->parameter($resourceName);
$user_id = \DB::table($resourceName)->find($resourceId)->user_id;

will work if the route is changed to

Route::get('/{bids}/bids'

... instead of

Route::get('/{id}/bids'...

Answer 1

像这样更改您的路由Route::get('user/{bids}/bids'... becasse以获得一个像$request->route()->parameter('name')这样的$request->route()->parameter('name')它必须与路由中的参数名称，表示加粗的一个用户/ {bids} / bids。

Answer 2

\\DB::table($resourceName)->find($resourceId) is returning null (no results), so there's no user_id property to it. Check that you've found a result before attempting to access its properties.

Same thing for $request->user()->id - if $request->user() is null due to the user not being logged in, it'll fail.