Symfony 프레임워크 미들웨어: 고급 액세스 제어 및 보호 메커니즘 구현

<?php

namespace AppMiddleware;

use SymfonyBundleFrameworkBundleControllerAbstractController;
use SymfonyComponentHttpFoundationRequest;
use SymfonyComponentHttpFoundationResponse;
use SymfonyComponentRoutingAnnotationRoute;

class AccessControlMiddleware extends AbstractController
{
    /**
     * @Route("/api/{id}", name="api_route")
     */
    public function __invoke(Request $request, $id)
    {
        // 检查用户是否具有访问API的权限
        if (!$this->isGranted('ROLE_ADMIN')) {
            return new Response('您没有权限访问该路由', 403);
        }

        // 如果具有访问权限，则将请求继续传递给下一个中间件或控制器
        return $this->forward('AppControllerApiController::handleRequest', [
            'request' => $request,
            'id' => $id,
        ]);
    }
}

access_control_middleware:
    path: /api/{id}
    controller: AppMiddlewareAccessControlMiddleware

<?php

namespace AppMiddleware;

use SymfonyBundleFrameworkBundleControllerAbstractController;
use SymfonyComponentHttpFoundationRequest;
use SymfonyComponentHttpFoundationResponse;
use SymfonyComponentRoutingAnnotationRoute;
use SymfonyComponentHttpFoundationSessionSessionInterface;

class RateLimitMiddleware extends AbstractController
{
    private $session;

    public function __construct(SessionInterface $session)
    {
        $this->session = $session;
    }

    /**
     * @Route("/", name="homepage")
     */
    public function __invoke(Request $request)
    {
        // 获取当前IP地址
        $ip = $request->getClientIp();

        // 检查当前IP地址的请求数是否超过阈值
        $requestCount = $this->session->get('request_count', 0);
        if ($requestCount >= 10) {
            return new Response('您的请求太频繁，请稍后再试', 429);
        }

        // 如果请求数未超过阈值，则将请求继续传递给下一个中间件或控制器
        $this->session->set('request_count', $requestCount + 1);

        return $this->forward('AppControllerHomeController::index', [
            'request' => $request,
        ]);
    }
}

rate_limit_middleware:
    path: /
    controller: AppMiddlewareRateLimitMiddleware