常用登陆验证后端AuthController.php

<?php


namespace app\admin;

use app\model\AdminNode;
use think\facade\View;

class AuthController extends BaseController
{
    // 初始化
    public $user;
    public $active = 'setting';

    protected function initialize()
    {
        $this->request->user = session('user');
        if (empty($this->request->user)) {
            if ($this->request->isAjax()) {
                ErrorException('请登录');
            }
            cms_redirect(url('/auth/login'));
        }

        if (empty($this->request->user['auth_node']['is_admin_role'])) {
            cms_redirect(url('/'));
        }

        //获取当前访问路由
        $url = strtolower('/admin/' . $this->request->controller() . '/' . $this->request->action());

        $auth = $this->request->user['auth_node']['node'];

        //菜单栏
        $menu = AdminNode::menu($auth);
        $menu = list_to_tree($menu->toArray(), 64, 'pid');
        View::assign(['menu' => $menu, 'active' => $this->active, 'user' => $this->request->user]);

        //获取路由映射,权限判断
        $route = !empty(config('auth.route')[$url]) ? config('auth.route')[$url] : $url;
        if ($route != 'allow_access' && $auth != 'all') {
            //获取用户授权路由
            $node = AdminNode::node($auth);
            if (!in_array($route, $node)) {
                throw new AuthErrorException("未授权访问", 10000, 403);
            }
        }
    }
}