在 Laravel 8 中使用中间件实现基于用户角色的访问控制

Schema::create('users', function (Blueprint $table) {
    $table->id();
    $table->string('account_type'); // 关键字段
    // ... 其他用户字段
    $table->timestamps();
});

// RegisterController.php 部分代码
public function store(Request $request)
{
    // ... 验证逻辑
    User::create([
        'account_type' => $request->account_type,
        // ... 其他用户数据
    ]);

    Auth::attempt([
        'email' => $request->email,
        'password' => $request->password,
    ]);

    // 根据账户类型重定向
    if(Auth::user()->account_type == 'profile'){
        return redirect()->route('dashboard_profile');
    } else {
        return redirect()->route('dashboard_business');
    }
}

php artisan make:middleware CheckAccountType

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class CheckAccountType
{
    /**
     * 处理传入请求。
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
     * @param  string  $type  期望的账户类型（例如 'profile' 或 'business'）
     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
     */
    public function handle(Request $request, Closure $next, $type)
    {
        // 1. 确保用户已登录
        // 2. 检查登录用户的 account_type 是否与期望的类型匹配
        if (Auth::check() && Auth::user()->account_type === $type) {
            return $next($request);
        }

        // 如果不满足条件，则中止请求并返回 403 错误
        abort(403, 'Unauthorized action. 您无权访问此页面。');
    }
}

// app/Http/Kernel.php

protected $routeMiddleware = [
    // ... 其他中间件
    'auth' => \App\Http\Middleware\Authenticate::class,
    'accType' => \App\Http\Middleware\CheckAccountType::class, // 注册自定义中间件
];

// routes/web.php

use App\Http\Controllers\BusinessDashboardController;
use App\Http\Controllers\ProfileDashboardController;

// 保护商业仪表盘，只有 account_type 为 'business' 的用户才能访问
Route::get('/dashboard/business', [BusinessDashboardController::class, 'index'])
    ->middleware(['auth', 'accType:business'])
    ->name('dashboard_business');

// 保护个人仪表盘，只有 account_type 为 'profile' 的用户才能访问
Route::get('/dashboard/profile', [ProfileDashboardController::class, 'index'])
    ->middleware(['auth', 'accType:profile'])
    ->name('dashboard_profile');

// 示例：直接在闭包路由中使用
Route::get('/business-area', function () {
    return "欢迎来到商业专区！";
})->middleware(['auth', 'accType:business']);

Route::get('/profile-area', function () {
    return "欢迎来到个人专区！";
})->middleware(['auth', 'accType:profile']);

// app/Http/Controllers/BusinessDashboardController.php

namespace App\Http\Controllers;

use Illuminate\Http\Request;

class BusinessDashboardController extends Controller
{
    public function __construct()
    {
        // 确保用户已登录，并且账户类型为 'business'
        $this->middleware(['auth', 'accType:business']);
    }

    public function index()
    {
        return view('auth.dashboard_business');
    }
}

// app/Http/Controllers/ProfileDashboardController.php

namespace App\Http\Controllers;

use Illuminate\Http\Request;

class ProfileDashboardController extends Controller
{
    public function __construct()
    {
        // 确保用户已登录，并且账户类型为 'profile'
        $this->middleware(['auth', 'accType:profile']);
    }

    public function index()
    {
        return view('auth.dashboard_profile');
    }
}