App\Http\Middleware\Admin\Authorization::handle()

Complexity

Conditions	9
Paths	10

Size

Total Lines	31
Code Lines	19

Duplication

Lines	0
Ratio	0 %

Importance

Changes	2
Bugs	1	Features	0

<?php
    public function handle($request, Closure $next, $guard)
    {
        $user = Auth::guard($guard)->user();
        if (in_array($user->id, config('light.superAdmin'))) {

Accessing id on the interface Illuminate\Contracts\Auth\Authenticatable suggest that you code against a concrete implementation. How about adding an instanceof check?

            return $next($request);
        }

        $route = Route::current();
        $routeName = $route->getName();
        $permission = Menu::where('route', $routeName)->where('route_params', '')->first();
        if ($permission && $user->can($permission->name)) {
            return $next($request);
        }

        $routeParams = $route->parameters();
        if (!empty($routeParams)) {
            foreach ($routeParams as $k => $v) {
                $val = "{$k}:{$v}";
                break;
            }

            $permission = Menu::where('route', $routeName)->where('route_params', $val)->first();

The variable $val does not seem to be defined for all execution paths leading up to this point.

            if ($permission && $user->can($permission->name)) {
                return $next($request);
            }
        }

        if ($request->expectsJson()) {
            return response()->json(['code' => 401, 'msg' => "未授权操作（路由别名：{$routeName}）"], 401);
        }
        abort(401, "未授权操作（路由别名：{$routeName}）");
    }