[PHP] 如何使用Casbin作为ThinkPHP的权限控制中间件

composer create-project topthink/think=5.1.* tp5

composer require casbin/think-adapter

php think casbin:publish

php think casbin:migrate

php think make:middleware Authorization

<?php

namespace app\http\middleware;

use Casbin;
use think\facade\Session;

class Authorization
{
  public function handle($request, \Closure $next)
  {
    // 当前登录用户名，这里以session为例
    // $user = Session::get('user_name') ?: 'test_user';
    $user = Session::get('user_name');

    $url = $request->url();
    $action = $request->method();

    if (!$user){
      return response()->data('Unauthenticated.')->code(401);
    }

    if (!Casbin::enforce($user, $url, $action)) {
      return response()->data('Unauthorized.')->code(403);
    }

    return $next($request);
  }
}

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = r.sub == p.sub && keyMatch2(r.obj, p.obj) && r.act == p.act

Route::group('users', function () {

  Route::get('', function () {
    return 'Users data.';
  });

  Route::get('/:id', function ($id) {
    return 'User: '.$id;
  });

})->middleware(\app\http\middleware\Authorization::class);