Laravel / Lumen：如何授权Controller访问？

Question

This is my first Laravel/Lumen project therefore my knowledge is not the best yet.

My Route:

$router->group(['prefix' => 'rest/v1','middleware' => 'auth'], function($router) {
    $router->get('articles','ArticleController@index');

    $router->get('article/{id}','ArticleController@getarticle');
});

My Controller:

class ArticleController extends Controller{
    public function index(){
        if(!CapabilityService::currentUserCan('fetch_basic_content')) {
            return response('Insufficient permissions.', 401);
        }
        return response()->json(Article::all());
    }

    public function getArticle($id){
        if(!CapabilityService::currentUserCan('fetch_basic_content')) {
            return response('Insufficient permissions.', 401);
        }
        return response()->json(Article::find($id));
    }
}

This is very cumbersome of course, especially as it is the same permission for accesssing all functions within my Controller. However I have to use my custom CapabilityService in order to check the permissions. How can I implement this better?

Answer 1

You can do that by creating a new middleware.

$router->group(['prefix' => 'rest/v1','middleware' => ['auth','your-custom-middleware']], function($router) {
    $router->get('articles','ArticleController@index');

    $router->get('article/{id}','ArticleController@getarticle');
});

Now in your middleware handle method do something like

if(!CapabilityService::currentUserCan('fetch_basic_content')) {
            return response('Insufficient permissions.', 401);
        }
return $next($request);