Laravel 7 中間件 - 如何為某些視圖/刀片文件的未經過身份驗證的用戶/來賓創建分組中間件

Question

我為注冊用戶創建了一個組中間件。 如果用戶通過身份驗證並登錄，則用戶將能夠訪問中間件內的視圖/頁面，否則他們將重定向到帶有錯誤消息的頁面。

但是，當我訪問login視圖時，它還會將我重定向到未經授權用戶的頁面（未經身份驗證的用戶的頁面） ，甚至是注冊視圖、密碼重置視圖和其他非用戶可以訪問的頁面。

如何分隔這些頁面，以便無需登錄或驗證即可訪問它們？

這是我名為UserMiddleware的中間件的代碼：

<?php

namespace App\Http\Middleware;
use Closure;

class UserMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (!$request->user())
        {
            return redirect('unauthorized');
        }
        return $next($request);
    }
}

這是我的分組路線和其他路線的代碼web.php ：

<?php

use Illuminate\Support\Facades\Route;
use Spatie\Activitylog\Models\Activity;

Route::get('/', function () {
    return view('welcome');
});

//Views for non-users/not logged-in users
Route::view('unauthorized', 'unauthorized');
Route::get('/home', 'HomeController@index')->name('home');
Route::get('/showLoginForm', 'LoginController@showLoginForm');


Route::group(['middleware' => ['user_middleware']], function() //Group middleware for authenticated / logged-in users
{
    Auth::routes();

    Route::get('/logout', 'Auth\LoginController@logout');
    Route::resource('master/vendor', 'Master\VendorController');
    Route::get('vendor/datatable', 'Master\VendorController@datatable')->name('vendor/datatable');

    Route::resource('master/product', 'Master\ProductController');
    Route::get('product/datatable', 'Master\ProductController@datatable')->name('product/datatable');
    Route::get('product/datatableTrash', 'Master\ProductController@datatableTrash')->name('product/datatableTrash');
    Route::post('product/undoTrash/{id}', 'Master\ProductController@undoTrash')->name('product/undoTrash/{id}');
    Route::get('master/product/history/{id}', 'Master\ProductController@history')->name('master/product/history/{id}');

    Route::resource('transaction/purchase-order', 'Transaction\PurchaseController');
    Route::get('transaction/purchase-order/vendor/popup_media', 'Transaction\PurchaseController@popup_media_vendor')->name('transaction/purchase-order/vendor/popup_media');
    Route::get('transaction/purchase-order/product/popup_media/{id_count}', 'Transaction\PurchaseController@popup_media_product')->name('transaction/purchase-order/product/popup_media/{id_count}');
    Route::get('browse-product/datatable', 'Master\ProductController@datatable_product')->name('browse-product/datatable');
    Route::get('browse-vendor/datatable', 'Master\VendorController@datatable_vendor')->name('browse-vendor/datatable');
    Route::get('purchase-order/datatable', 'Transaction\PurchaseController@datatable')->name('purchase-order/datatable');
    Route::post('transaction/purchase-order/receive/{id}', 'Transaction\PurchaseController@received')->name('transaction/purchase-order/received/{id}');
    Route::get('transaction/purchase-order/print/{id}', 'Transaction\SaleController@print')->name('transaction/purchase-order/print/{id}');

    Route::resource('transaction/sales', 'Transaction\SaleController');
    Route::get('transaction/sales/product/popup_media/{id_count}', 'Transaction\SaleController@popup_media_product')->name('transaction/sales/product/popup_media/{id_count}');
    Route::get('sales/datatable', 'Transaction\SaleController@datatable')->name('sales/datatable');
    Route::get('transaction/sales/print/{id}', 'Transaction\SaleController@print')->name('transaction/sales/print/{id}');

    Route::get('transaction/stock', 'Transaction\StockController@index')->name('transaction/stock');
    Route::get('transaction/stock/product/popup_media', 'Transaction\StockController@popup_media_product')->name('transaction/stock/product/popup_media');
    Route::post('transaction/stock', 'Transaction\StockController@update')->name('transaction/stock');
    Route::get('stock/report', 'Transaction\StockController@report')->name('stock/report');

    Route::resource('user', 'UserController');
    Route::get('/datatable_Activities', 'UserController@datatable_Activities')->name('datatable_Activities');
    Route::get('/RecentActivities', 'UserController@RecentActivities')->name('RecentActivities');
    Route::get('/password', 'UserController@Password');
    //Route::get('/calendar', 'UserController@Calendar');
    Route::post('user/updatePassword', 'UserController@updatePassword')->name('user.updatePassword');

});

還有我的Kernel.php的代碼段：

protected $middlewareGroups = [
        'web' => [
            \App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Illuminate\Session\Middleware\AuthenticateSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        ],

        'api' => [
            'throttle:60,1',
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        ],

        'user_middleware' => [
            \App\Http\Middleware\UserMiddleware::class,
        ]
    ];

這是我的問題演示：

Answer 1

在這種情況下，將 Auth::routes() 放在“user_middleware”之外應該是正確的方法。