{"id":855,"date":"2025-06-12T01:14:29","date_gmt":"2025-06-11T17:14:29","guid":{"rendered":"https:\/\/www.zhaozhao123.cn\/php\/php-application-manual\/laravel\/855.html"},"modified":"2025-06-12T01:14:29","modified_gmt":"2025-06-11T17:14:29","slug":"laravel%e4%b8%ad%e7%9a%84%e6%8e%88%e6%9d%83%e8%a7%92%e8%89%b2%ef%bc%9a%e5%ae%9e%e7%94%a8%e6%8c%87%e5%8d%97","status":"publish","type":"my1js","link":"https:\/\/www.zhaozhao123.cn\/php\/my1js\/855.html","title":{"rendered":"Laravel\u4e2d\u7684\u6388\u6743\u89d2\u8272\uff1a\u5b9e\u7528\u6307\u5357"},"content":{"rendered":"
\r\n
\r\n
\r\n
\r\n
\r\n
\"Bug编译狮\"<\/figure>\r\n\r\n\r\n\r\n

Bug编译狮<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
\r\n
\r\n

《Laravel中的授权角色：实用指南》<\/p>\n

在现代的Web开发中，权限控制是确保安全性和用户满意度的关键因素之一。Laravel是一个非常流行的PHP框架，它提供了强大的权限管理功能。本文将帮助你在Laravel项目中使用授权角色来实现用户认证和访问控制。<\/p>\n

1. 安装Laravel<\/h3>\n

首先，你需要安装Laravel。你可以通过Composer来完成这个过程：<\/p>\n

composer create-project --prefer-dist laravel\/laravel my-laravel-app\ncd my-laravel-app<\/code><\/pre>\n
2. 创建一个角色模型<\/h3>\n
接下来，我们需要创建一个角色模型来表示用户的权限。在app\/Models<\/code>目录下创建一个名为Role.php<\/code>的文件，并添加以下代码：<\/p>\n
<?php\n\nnamespace AppModels;\n\nuse IlluminateDatabaseEloquentModel;\nuse IlluminateSupportFacadesGate;\n\nclass Role extends Model\n{\n    protected $fillable = ['name', 'description'];\n\n    public function users()\n    {\n        return $this->belongsToMany(User::class);\n    }\n\n    public function authorize($ability, $arguments = [])\n    {\n        if (Gate::check($ability . '.' . $arguments[0], $arguments[1])) {\n            return true;\n        }\n\n        abort(403);\n    }\n}<\/code><\/pre>\n
3. 创建一个用户模型<\/h3>\n
同样，在app\/Models<\/code>目录下创建一个名为User.php<\/code>的文件，并添加以下代码：<\/p>\n
<?php\n\nnamespace AppModels;\n\nuse IlluminateFoundationAuthUser as Authenticatable;\nuse IlluminateNotificationsNotifiable;\nuse LaravelSoftDeletes;\nuse SpatiePermissionTraitsHasRoles;\n\nclass User extends Authenticatable\n{\n    use Notifiable, SoftDeletes, HasRoles;\n\n    protected $fillable = [\n        'name', 'email', 'password',\n    ];\n\n    protected $hidden = [\n        'password', 'remember_token',\n    ];\n\n    public function roles()\n    {\n        return $this->belongsToMany(Role::class);\n    }\n\n    public function authorize($ability, $arguments = [])\n    {\n        if (Gate::check($ability . '.' . $arguments[0], $arguments[1])) {\n            return true;\n        }\n\n        abort(403);\n    }\n}<\/code><\/pre>\n
4. 配置路由和控制器<\/h3>\n
在routes\/web.php<\/code>文件中配置路由和控制器：<\/p>\n
use AppHttpControllersAuthController;\nuse AppHttpControllersPostController;\nuse AppHttpControllersRoleController;\nuse AppHttpControllersUserController;\n\nRoute::get('\/login', [AuthController::class, 'showLoginForm'])->name('login');\nRoute::post('\/login', [AuthController::class, 'authenticate']);\nRoute::get('\/register', [AuthController::class, 'showRegistrationForm'])->name('register');\nRoute::post('\/register', [AuthController::class, 'store']);\n\nRoute::middleware(['auth:sanctum'])->group(function () {\n    Route::apiResource('posts', PostController::class);\n    Route::apiResource('roles', RoleController::class);\n    Route::apiResource('users', UserController::class);\n});<\/code><\/pre>\n
5. 创建控制器<\/h3>\n
在app\/Http\/Controllers<\/code>目录下创建以下控制器：<\/p>\n
    \n
  • AuthController<\/code><\/li>\n
  • PostController<\/code><\/li>\n
  • RoleController<\/code><\/li>\n
  • UserController<\/code><\/li>\n<\/ul>\n
    AuthController<\/h4>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse AppModelsUser;\nuse IlluminateHttpRequest;\nuse IlluminateSupportFacadesAuth;\nuse IlluminateSupportFacadesValidator;\n\nclass AuthController extends Controller\n{\n    public function showLoginForm()\n    {\n        return view('auth.login');\n    }\n\n    public function authenticate(Request $request)\n    {\n        $validator = Validator::make($request->all(), [\n            'email' => 'required|email',\n            'password' => 'required',\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        if (!Auth::attempt(['email' => $request['email'], 'password' => $request['password']])) {\n            return redirect()->back()->withErrors(['message' => 'Invalid credentials'])->withInput();\n        }\n\n        return redirect()->intended('\/');\n    }\n\n    public function logout()\n    {\n        Auth::logout();\n\n        return redirect()->route('login');\n    }\n}<\/code><\/pre>\n
    PostController<\/h4>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse AppModelsPost;\nuse IlluminateHttpRequest;\n\nclass PostController extends Controller\n{\n    public function index()\n    {\n        $posts = Post::all();\n        return view('posts.index', compact('posts'));\n    }\n\n    public function store(Request $request)\n    {\n        $validator = Validator::make($request->all(), [\n            'title' => 'required|max:255',\n            'content' => 'required',\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        $post = new Post();\n        $post->title = $request['title'];\n        $post->content = $request['content'];\n        $post->save();\n\n        return redirect()->route('posts.index');\n    }\n}<\/code><\/pre>\n
    RoleController<\/h4>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse AppModelsRole;\nuse IlluminateHttpRequest;\n\nclass RoleController extends Controller\n{\n    public function index()\n    {\n        $roles = Role::all();\n        return view('roles.index', compact('roles'));\n    }\n\n    public function store(Request $request)\n    {\n        $validator = Validator::make($request->all(), [\n            'name' => 'required|unique:roles,name',\n            'description' => 'required',\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        $role = new Role();\n        $role->name = $request['name'];\n        $role->description = $request['description'];\n        $role->save();\n\n        return redirect()->route('roles.index');\n    }\n\n    public function update(Request $request, $id)\n    {\n        $validator = Validator::make($request->all(), [\n            'name' => 'required|unique:roles,name,' . $id,\n            'description' => 'required',\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        $role = Role::find($id);\n        $role->name = $request['name'];\n        $role->description = $request['description'];\n        $role->save();\n\n        return redirect()->route('roles.index');\n    }\n\n    public function destroy($id)\n    {\n        $role = Role::find($id);\n        $role->delete();\n\n        return redirect()->route('roles.index');\n    }\n}<\/code><\/pre>\n
    UserController<\/h4>\n
    <?php\n\nnamespace AppHttpControllers;\n\nuse AppModelsUser;\nuse IlluminateHttpRequest;\n\nclass UserController extends Controller\n{\n    public function index()\n    {\n        $users = User::all();\n        return view('users.index', compact('users'));\n    }\n\n    public function store(Request $request)\n    {\n        $validator = Validator::make($request->all(), [\n            'name' => 'required|max:255',\n            'email' => 'required|email|unique:users,email',\n            'password' => 'required|min:8',\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        $user = new User();\n        $user->name = $request['name'];\n        $user->email = $request['email'];\n        $user->password = bcrypt($request['password']);\n        $user->save();\n\n        return redirect()->route('users.index');\n    }\n\n    public function update(Request $request, $id)\n    {\n        $validator = Validator::make($request->all(), [\n            'name' => 'required|max:255',\n            'email' => 'required|email|unique:users,email,' . $id,\n        ]);\n\n        if ($validator->fails()) {\n            return redirect()->back()->withErrors($validator)->withInput();\n        }\n\n        $user = User::find($id);\n        $user->name = $request['name'];\n        $user->email = $request['email'];\n        if ($request->has('password')) {\n            $user->password = bcrypt($request['password']);\n        }\n        $user->save();\n\n        return redirect()->route('users.index');\n    }\n\n    public function destroy($id)\n    {\n        $user = User::find($id);\n        $user->delete();\n\n        return redirect()->route('users.index');\n    }\n\n    public function assignRole(Request $request, $userId)\n    {\n        $roleId = $request->input('role_id');\n        $user = User::find($userId);\n        $user->assignRole($roleId);\n\n        return redirect()->route('users.show', $userId);\n    }\n\n    public function removeRole(Request $request, $userId, $roleId)\n    {\n        $user = User::find($userId);\n        $user->removeRole($roleId);\n\n        return redirect()->route('users.show', $userId);\n    }\n}<\/code><\/pre>\n
    6. 赋予用户角色<\/h3>\n
    现在，你可以为用户分配角色。在app\/Console\/Kernel.php<\/code>文件中运行以下命令：<\/p>\n
    php artisan make:command AssignRole<\/code><\/pre>\n
    编辑生成的AssignRole<\/code>类，添加以下代码：<\/p>\n
    <?php\n\nnamespace AppConsoleCommands;\n\nuse AppModelsRole;\nuse AppModelsUser;\nuse IlluminateConsoleCommand;\n\nclass AssignRole extends Command\n{\n    \/**\n     * The name and signature of the console command.\n     *\n     * @var string\n     *\/\n    protected $signature = 'assign-role {user} {role}';\n\n    \/**\n     * The console command description.\n     *\n     * @var string\n     *\/\n    protected $description = 'Assign a role to a user';\n\n    \/**\n     * Execute the console command.\n     *\n     * @return int\n     *\/\n    public function handle()\n    {\n        $user = User::find($this->argument('user'));\n        $role = Role::find($this->argument('role'));\n\n        if (!$user || !$role) {\n            $this->error('User or role not found.');\n            return 1;\n        }\n\n        $user->assignRole($role->name);\n\n        $this->info('Role assigned successfully.');\n        return 0;\n    }\n}<\/code><\/pre>\n
    然后，你可以使用以下命令为用户分配角色：<\/p>\n
    php artisan assign-role 1 admin<\/code><\/pre>\n
    这样，你就成功地为用户分配了角色，并且可以通过Gates进行权限检查。<\/p>\n
    通过以上步骤，你可以在Laravel项目中使用授权角色来实现用户认证和访问控制。希望这篇指南对你有所帮助！<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
    \r\n
    \r\n
    \r\n
    \r\n
    \r\n
    \"黑板Bug讲师\"<\/figure>\r\n\r\n\r\n\r\n
    黑板Bug讲师<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
    \r\n
    \r\n
    介绍<\/h2>
    授权是任何Web应用程序的关键组成部分，确保用户具有执行特定操作的适当权限。Laravel，世界上最流行的PHP框架之一，通过内置功能以及如Spatie的Role & Permission等包提供了一种优雅且简单的处理授权的方式。在这篇指南中，我们将从基础到更高级的概念介绍如何在Laravel中实现基于角色的授权。<\/p>
    在Laravel中设置角色（roles）的操作。<\/h2>
    首先，我们需要在我们的Laravel应用程序中定义角色基础设施。虽然Laravel本身没有内置的角色功能，但通过使用Gates和Policies，我们可以手动定义角色和权限，或者集成第三方包来实现这一点。<\/p>
    首先，使用迁移创建角色和权限表：<\/p>
    php artisan make:migration create_roles_table\nphp artisan make:migration create_permissions_table\n<\/code><\/pre>
    您的迁移文件应定义角色和权限所需的列。一旦创建了这些迁移，就运行它们：<\/p>
    php artisan migrate\n<\/code><\/pre>
    接下来，设置模型：<\/p>
    php artisan make:model Role\nphp artisan make:model Permission\n<\/code><\/pre>
    然后，编辑。Role<\/code>and 是“并且”的意思。Permission<\/code>模型用于定义关系。<\/p>
    为用户分配角色。<\/h2>
    角色需要与用户关联。我们可以为我们的User模型添加一个方法，例如：<\/p>
    public function roles()\n{\n    return $this->belongsToMany(Role::class);\n}\n<\/code><\/pre>
    我们也需要为用户分配角色，可以通过以下方式实现：<\/p>
    $user->roles()->attach($roleId);\n<\/code><\/pre>
    使用Gates进行授权<\/h2>
    Laravel的Gate是闭包，用于确定用户是否被授权执行特定的操作。以下是一个简单的示例：<\/p>
    Gate::define('edit-article', function ($user, $article) {\n    return $user->id === $article->user_id;\n});\n<\/code><\/pre>
    为了检查此授权，我们使用：<\/p>
    if (Gate::allows('edit-article', $article)) {\n    \/\/ The user can edit the article\n}\n<\/code><\/pre>
    定义政策<\/h2>
    政策是一组组织围绕特定模型或资源的授权逻辑的类。要创建一个策略：<\/p>
    php artisan make:policy ArticlePolicy --model=Article\n<\/code><\/pre>
    这会产生包含多个模板方法的策略。你可以定义类似于的方法。update()<\/code>哪个可以检查用户是否有必要的权限以执行角色：<\/p>
    public function update(User $user, Article $article)\n{\n    return $user->roles->contains('editor');\n}\n<\/code><\/pre>
    该方法现在可以在使用控制器时使用了。authorize<\/code>方法：<\/p>
    $this->authorize('update', $article);\n<\/code><\/pre>
    高级角色和权限设置的Spatie包<\/h2>
    对于更复杂的应用，通常使用Spatie的Laravel-Permission包会更容易一些。通过composer安装该包并发布其资产后，你可以用简单的命令添加角色和权限：<\/p>
    use SpatiePermissionModelsRole;\nuse SpatiePermissionModelsPermission;\n\n$role = Role::create(['name' => 'editor']);\n$permission = Permission::create(['name' => 'edit articles']);\n<\/code><\/pre>
    它还提供了用于使用角色和权限保护路由的中间件：<\/p>
    Route::group(['middleware' => ['role:editor']], function () {\n    \/\/ Routes here will require the 'editor' role\n});\n<\/code><\/pre>
    授权授权指引 Blade<\/h2>
    在我的观点中，你可以利用Laravel内置的Blade指令来根据用户的角色或权限显示内容：<\/p>
    @role('editor')\n    <!-- Content for editors -->\n@endrole\n\n@can('edit articles')\n    <!-- Content for users who can edit articles -->\n@endcan\n<\/code><\/pre>
    测试授权<\/h2>
    测试在确保应用授权功能正确运行方面至关重要。Laravel 通过内置特性提供了写测试的便利：<\/p>
    $response = $this->actingAs($user)->get('\/article\/edit\/1');\n$response->assertStatus(403);\n<\/code><\/pre>
    此检查是否正确阻止未经授权的用户访问受保护的路由。<\/p>
    结论。<\/h2>
    综上所述，理解并实施Laravel中的角色授权对于确保应用内操作的安全至关重要。通过设置角色和权限、使用Gate和Policy等方法，以及利用如Spatie这样的复杂场景包，Laravel开发人员可以有效地管理访问控制。<\/p><\/body>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>
    \r\n
    \r\n
    \r\n
    \r\n
    \r\n
    \"长工码奴1523\"<\/figure>\r\n\r\n\r\n\r\n
    长工码奴1523<\/h2>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n\r\n\r\n\r\n
    \r\n
    \r\n
    Laravel 是一个非常流行的 PHP 开发框架，它提供了丰富的功能和强大的 API。其中的一个关键特性是权限管理，通过授权角色（roles）来控制用户对资源的访问。<\/p>\n
    在 Laravel 中，创建和管理角色非常简单。下面是一些基本的步骤和示例代码：<\/p>\n
    1. 创建角色<\/h3>\n
    首先，你需要定义一个新的角色。这个角色将用于指定哪些用户可以访问哪些特定的资源。你可以使用 Role<\/code> 类来定义角色。<\/p>\n
    use IlluminateSupportFacadesGate;\n\nclass Role {\n    public $name;\n    public $guard_name;\n\n    \/**\n     * Create a new role instance.\n     *\n     * @param string $name\n     * @param string $guard_name\n     *\/\n    public function __construct($name, $guard_name)\n    {\n        $this->name = $name;\n        $this->guard_name = $guard_name;\n    }\n\n    \/**\n     * Determine if the user has the role.\n     *\n     * @param IlluminateContractsAuthAuthenticatable $user\n     * @return bool\n     *\/\n    public function can($ability, $guard = null)\n    {\n        return Gate::allows($this->name . '.' . $ability, $guard);\n    }\n}<\/code><\/pre>\n
    2. 使用角色<\/h3>\n
    一旦你创建了角色，就可以为不同的控制器设置这些角色。这样，只有具有相应角色的用户才能访问它们。<\/p>\n
    \/\/ controller.php\npublic function index()\n{\n    \/\/ ...\n\n    foreach (config('auth.roles') as $role => $guards) {\n        if ($this->hasRole($role)) {\n            $this->authorize($role, $guards);\n        } else {\n            abort(403);\n        }\n    }\n\n    \/\/ ...\n}\n\nprotected function hasRole($role)\n{\n    return in_array($role, config('auth.role_names'));\n}<\/code><\/pre>\n
    示例代码<\/h3>\n
    以下是一个简单的例子，展示了如何在控制器中检查用户是否具有某个角色，并根据需要进行权限验证：<\/p>\n
    public function index(Request $request)\n{\n    \/\/ ...\n\n    if ($request->hasRole('admin')) {\n        \/\/ 用户具有管理员权限，允许访问\n    } elseif ($request->hasRole('editor')) {\n        \/\/ 用户具有编辑权限，允许访问\n    } else {\n        \/\/ 其他用户被拒绝访问\n    }\n\n    \/\/ ...\n}<\/code><\/pre>\n
    在这个例子中，我们检查 $request->hasRole('admin')<\/code> 来判断用户是否具有管理员权限，然后根据结果决定是否允许访问。<\/p>\n
    这就是 Laravel 角色系统的基本用法。你可以根据需要扩展和定制这个系统，以满足不同场景的需求。<\/p>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"
    Bug编译狮 《Laravel中的授权角色：实用指南》 在现&#20..<\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false},"tags":[],"my1js2nav":[44],"tuisongtax":[],"class_list":["post-855","my1js","type-my1js","status-publish","hentry","my1js2nav-laravel"],"acf":{"qian_art_seotitle":"","qian_art_seotitle_source":{"label":"SEO\u6807\u9898","type":"text","formatted_value":""},"qian_art_seokws":"","qian_art_seokws_source":{"label":"SEO\u5173\u952e\u8bcd","type":"text","formatted_value":""},"qian_art_stzhong":"","qian_art_stzhong_source":{"label":"\u4e2d | \u77ed\u6807\u9898","type":"text","formatted_value":""}},"_links":{"self":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js\/855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js"}],"about":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/types\/my1js"}],"author":[{"embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/users\/1"}],"wp:attachment":[{"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/media?parent=855"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tags?post=855"},{"taxonomy":"my1js2nav","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/my1js2nav?post=855"},{"taxonomy":"tuisongtax","embeddable":true,"href":"https:\/\/www.zhaozhao123.cn\/php\/wp-json\/wp\/v2\/tuisongtax?post=855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}