使用Laravel进行高级认证和授权：实现复杂的访问控制

use IlluminateDatabaseEloquentModel;

class Role extends Model
{
    public function permissions()
    {
        return $this->belongsToMany('AppPermission');
    }
}

class Permission extends Model
{
    public function roles()
    {
        return $this->belongsToMany('AppRole');
    }
}

class User extends Authenticatable
{
    public function roles()
    {
        return $this->belongsToMany('AppRole');
    }

    public function permissions()
    {
        return $this->belongsToMany('AppPermission');
    }

    public function hasRole($roles)
    {
        if (is_string($roles)) {
            $roles = [$roles];
        }

        foreach ($roles as $role) {
            if ($this->roles->contains('name', $role)) {
                return true;
            }
        }

        return false;
    }

    public function hasPermission($permissions)
    {
        if (is_string($permissions)) {
            $permissions = [$permissions];
        }

        foreach ($permissions as $permission) {
            if ($this->permissions->contains('name', $permission)) {
                return true;
            }
        }

        return false;
    }
}

namespace AppHttpMiddleware;

use Closure;
use IlluminateSupportFacadesAuth;

class CheckPermission
{
    public function handle($request, Closure $next, $permission)
    {
        if (!Auth::check() || !Auth::user()->hasPermission($permission)) {
            // 没有权限访问
            return redirect('/unauthorized');
        }

        return $next($request);
    }
}

Route::get('/admin', function () {
    return view('admin.home');
})->middleware('checkPermission:accessAdmin');