App\Http\Middleware\Admin\Authorization::handle()

Complexity

Conditions	9
Paths	9

Size

Total Lines	32
Code Lines	20

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function handle($request, Closure $next, $guard)
    {
        $user = Auth::guard($guard)->user();
        if (in_array($user->id, config('light.superAdmin'))) {
            return $next($request);
        }

        $route = Route::current();
        $routeName = $route->getName();
        $permission = Menu::where('route', $routeName)->where('route_params', '')->first();
        if ($permission && $user->can($permission->name)) {
            return $next($request);
        }

        $routeParams = $route->parameters();
        if (empty($routeParams)) {
            return $next($request);
        }
        foreach ($routeParams as $k => $v) {
            $val = "{$k}:{$v}";
            break;
        }

        $permission = Menu::where('route', $routeName)->where('route_params', $val)->first();

The variable $val does not seem to be defined for all execution paths leading up to this point.

        if ($permission && $user->can($permission->name)) {
            return $next($request);
        }

        if ($request->expectsJson()) {
            return response()->json(['code' => 401, 'msg' => "未授权操作（路由别名：{$routeName}）"], 401);
        }
        abort(401, "未授权操作（路由别名：{$routeName}）");
    }