Laravel: 自定义中间件正在应用于每个路由

Question

我创建了一个中间件：

use Closure;
use Gate;
class ACLMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (Gate::denies('access-post')) {
            abort(403,'Not allowed!!!');
        }
        return $next($request);
    }
}

然后在路由中定义为：

Route::get('/', 'HomeController@index');

Route::group(['middleware' => 'auth','acl'], function () {

    Route::resource('post', 'PostController');
   ...

当我运行这个..它适用于所有路线，甚至 /。为什么会这样？

Kernel.php

<?php

namespace App\Http;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel
{
    /**
     * The application's global HTTP middleware stack.
     *
     * @var array
     */
    protected $middleware = [
        \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
        \App\Http\Middleware\EncryptCookies::class,
        \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
        \Illuminate\Session\Middleware\StartSession::class,
        \Illuminate\View\Middleware\ShareErrorsFromSession::class,
        \App\Http\Middleware\VerifyCsrfToken::class,
        \App\Http\Middleware\ACLMiddleware::class,
    ];

    /**
     * The application's route middleware.
     *
     * @var array
     */
    protected $routeMiddleware = [
        'auth'       => \App\Http\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'guest'      => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'acl'        => \App\Http\Middleware\ACLMiddleware::class,
    ];
}

Answer 1

您的中间件已在 App\Http\Kernel.php 中注册。

数组：

protected $middleware = ['...'];

定义了每个 http 请求中应该运行的中间件。在您的情况下，如果您不想在每个请求中删除 \App\Http\Middleware\ACLMiddleware::class 运行。

数组：

protected $routeMiddleware = ['...'];

定义仅在您指定的地方应用的中间件。这是您的定义所在的位置。

Answer 2

您需要 link 您的中间件与您的路由使用 MW class 名称，例如：Route::post('route', 'Controller@index')->middleware(Authorize::class);

Laravel: 自定义中间件正在应用于每个路由

Laravel: Custom Middleware is applying on each route

laravel-middleware

laravel-5.1