[英]PHP Laravel API - How to limit request to a number of trusted hosts?
我在Laravel Lumen API 5.7中看到了以下方法
Request::setTrustedHosts($hostPatterns)
我想在中间件中使用它以限制对特定客户端列表的请求。
我该怎么办?
是否有任何等效的现有$request->isFromTrustedProxy()
方法,我相信它被指定做一个完全不同的事情?
假设您通过IP地址或类似的方式限制访客,您可以构建这样的中间件:
namespace App\Http\Middleware;
use Closure;
class LimitAccess {
public function handle($request, Closure $next)
{
if(env('APP_ENV')=='production') {
$ipArray = ['127.0.0.1',...]; //Add trusted IP addresses here
if (in_array(\Request::ip(), $ipArray)) {
return $next($request);
} else {
return response("You are not allowed here!", 503);
}
} else {
return $next($request);
}
}
}
对于Laravel,您可以在$ middlewareGroups数组下的Http \\ Kernel.php中注册此中间件,如下所示:
protected $middlewareGroups = [
'api' => [
\App\Http\Middleware\LimitAccess::class
]
];
对于Lumen,您可以通过bootstrap / app.php文件中的短手键识别中间件来注册:
$app->routeMiddleware([
'limit' => App\Http\Middleware\LimitAccess::class,
]);
然后你会将它应用到你想要的路线:
$router->get('url/you/want/to/limit', ['middleware' => 'limit', function () {
//
}]);
这应该完全符合你的要求。 您显然可以将IP地址数组更改为您想要的任何内容。
基于@eResourcesInc答案,因为我想限制对某些可信客户端的请求(比如一些使用API的姐妹服务器),这就是我想出的:
使用我想要的受信任客户端主机名在.env
文件中创建新条目
TRUSTED_CLIENTS=specific.example.com|*.whatever.net|8-8-8-8.static.example.org
然后在App\\Http\\Middleware\\TrustedAccess.php
创建TrustedAccess
中间件
namespace App\Http\Middleware;
use Illuminate\Http\Response;
use Closure;
class TrustedAccess
{
private $trustedClients;
public function __construct()
{
$this->trustedClients = [];
if (env('TRUSTED_CLIENTS')) {
$list = explode('|', env('TRUSTED_CLIENTS'));
if ($list !== false && !empty($list)) {
$this->trustedClients = $list;
}
}
}
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if(env('APP_ENV')=='production') {
$clientHostname = gethostbyaddr($request->getClientIp());
$isTrusted = false;
foreach ($this->trustedClients as $trustedClientHostname) {
if (self::isHostnameMatch($clientHostname, $trustedClientHostname)) {
$isTrusted = true;
break;
}
}
if ($isTrusted) {
return $next($request);
} else {
return response()->json(['error'=>'Unauthorised'], Response::HTTP_UNAUTHORIZED);
}
} else {
return $next($request);
}
}
private static function isHostnameMatch($hostname, $trustedHostname)
{
if ($trustedHostname == '*' || $hostname == $trustedHostname) {
return true;
}
// check if wildcard subdomain
$subdomainDelimiterPosition = strpos($hostname, '.');
if(strlen($trustedHostname) < 2 || $subdomainDelimiterPosition === false) {
return false;
}
if (substr($trustedHostname, 0, 2) == '*.') {
if (substr($trustedHostname, 1) == substr($hostname, $subdomainDelimiterPosition)) {
return true;
}
}
return false;
}
}
对于Lumen,我在bootstrap/app.php
文件中使用简写键注册了中间件:
$app->routeMiddleware([
'trusted' => App\Http\Middleware\TrustedAccess::class,
]);
然后我将它应用到这样的路线:
$router->get('url/I/want/to/limit', ['middleware' => 'trusted', function () {
//
}]);
就是这个。 如有任何建议请评论!
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.