数据表：用户表（users）、管理员表（admin_user），
- 配置bootstrap/app.php
'guards' => ['web' => ['driver' => 'session','provider' => 'admin_users',],'home' => ['driver' => 'sanctum','provider' => 'users',],'admin' => ['driver' => 'sanctum','provider' => 'admin_users',]],'providers' => ['admin_users' => ['driver' => 'eloquent','model' => env('AUTH_MODEL', App\Models\AdminUser::class),],'users' => ['driver' => 'eloquent','model' => env('AUTH_MODEL', App\Models\User::class),],],
-
创建中间件
-
checkHomeEndToken.php
-
checkAdminEndToken.php
php artisan make:middleware checkHomeEndToken // home路由使用php artisan make:middleware checkAdminEndToken // admin路由使用
- 实现中间件
<?phpnamespace App\Http\Middleware;use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;class checkHomeEndToken
{public function handle(Request $request, Closure $next): Response{if ($request->user('home') && $request->user('home')->tokenCan('home-end')) {return $next($request);}return response()->json(['message' => '未登录'], 401);}
}
<?phpnamespace App\Http\Middleware;use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;class checkAdminEndToken
{public function handle(Request $request, Closure $next): Response{if ($request->user('admin') && $request->user('admin')->tokenCan('admin-end')) {return $next($request);}return response()->json(['message' => '未登录'], 401);}
}
- 配置路由
路由配置到web.php,api路由不使用了。我把web的csrf去掉了。用的也是token
<?phpuse App\Http\Controllers\admin\AuthController;
use Illuminate\Support\Facades\Route;
use App\Http\Middleware\checkAdminEndToken;
use App\Http\Middleware\checkHomeEndToken;// 前台路由
Route::prefix('/')->middleware(['auth:sanctum',checkHomeEndToken::class])->group(function () {// 首页Route::get('',[\App\Http\Controllers\home\IndexController::class,'index']);
});// 后台管理路由
Route::prefix('admin')->middleware(['auth:sanctum',checkAdminEndToken::class])->group(function () {// 登录 不使用auth:sanctumRoute::post('login', [AuthController::class,'login'])->withoutMiddleware(['auth:sanctum',checkAdminEndToken::class]);// 管理员Route::resource('admin-user', \App\Http\Controllers\admin\AdminUserController::class)->except(['create', 'edit']);// 角色Route::resource('role', \App\Http\Controllers\admin\RoleController::class)->except(['create', 'edit']);
});
- 登录
$token = $request->user()->createToken('admin',['admin-end'])->plainTextToken;
完成
