[英]PHP Laravel API - How to limit request to a number of trusted hosts?
我在Laravel Lumen API 5.7中看到了以下方法
Request::setTrustedHosts($hostPatterns)
我想在中間件中使用它以限制對特定客戶端列表的請求。
我該怎么辦?
是否有任何等效的現有$request->isFromTrustedProxy()
方法,我相信它被指定做一個完全不同的事情?
假設您通過IP地址或類似的方式限制訪客,您可以構建這樣的中間件:
namespace App\Http\Middleware;
use Closure;
class LimitAccess {
public function handle($request, Closure $next)
{
if(env('APP_ENV')=='production') {
$ipArray = ['127.0.0.1',...]; //Add trusted IP addresses here
if (in_array(\Request::ip(), $ipArray)) {
return $next($request);
} else {
return response("You are not allowed here!", 503);
}
} else {
return $next($request);
}
}
}
對於Laravel,您可以在$ middlewareGroups數組下的Http \\ Kernel.php中注冊此中間件,如下所示:
protected $middlewareGroups = [
'api' => [
\App\Http\Middleware\LimitAccess::class
]
];
對於Lumen,您可以通過bootstrap / app.php文件中的短手鍵識別中間件來注冊:
$app->routeMiddleware([
'limit' => App\Http\Middleware\LimitAccess::class,
]);
然后你會將它應用到你想要的路線:
$router->get('url/you/want/to/limit', ['middleware' => 'limit', function () {
//
}]);
這應該完全符合你的要求。 您顯然可以將IP地址數組更改為您想要的任何內容。
基於@eResourcesInc答案,因為我想限制對某些可信客戶端的請求(比如一些使用API的姐妹服務器),這就是我想出的:
使用我想要的受信任客戶端主機名在.env
文件中創建新條目
TRUSTED_CLIENTS=specific.example.com|*.whatever.net|8-8-8-8.static.example.org
然后在App\\Http\\Middleware\\TrustedAccess.php
創建TrustedAccess
中間件
namespace App\Http\Middleware;
use Illuminate\Http\Response;
use Closure;
class TrustedAccess
{
private $trustedClients;
public function __construct()
{
$this->trustedClients = [];
if (env('TRUSTED_CLIENTS')) {
$list = explode('|', env('TRUSTED_CLIENTS'));
if ($list !== false && !empty($list)) {
$this->trustedClients = $list;
}
}
}
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if(env('APP_ENV')=='production') {
$clientHostname = gethostbyaddr($request->getClientIp());
$isTrusted = false;
foreach ($this->trustedClients as $trustedClientHostname) {
if (self::isHostnameMatch($clientHostname, $trustedClientHostname)) {
$isTrusted = true;
break;
}
}
if ($isTrusted) {
return $next($request);
} else {
return response()->json(['error'=>'Unauthorised'], Response::HTTP_UNAUTHORIZED);
}
} else {
return $next($request);
}
}
private static function isHostnameMatch($hostname, $trustedHostname)
{
if ($trustedHostname == '*' || $hostname == $trustedHostname) {
return true;
}
// check if wildcard subdomain
$subdomainDelimiterPosition = strpos($hostname, '.');
if(strlen($trustedHostname) < 2 || $subdomainDelimiterPosition === false) {
return false;
}
if (substr($trustedHostname, 0, 2) == '*.') {
if (substr($trustedHostname, 1) == substr($hostname, $subdomainDelimiterPosition)) {
return true;
}
}
return false;
}
}
對於Lumen,我在bootstrap/app.php
文件中使用簡寫鍵注冊了中間件:
$app->routeMiddleware([
'trusted' => App\Http\Middleware\TrustedAccess::class,
]);
然后我將它應用到這樣的路線:
$router->get('url/I/want/to/limit', ['middleware' => 'trusted', function () {
//
}]);
就是這個。 如有任何建議請評論!
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.