Files
toolbox/app/Http/Middleware/AdminIpMiddleware.php

31 lines
689 B
PHP

<?php
namespace App\Http\Middleware;
use App\Support\IpAccess;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class AdminIpMiddleware
{
/**
* @param Closure(Request): Response $next
*/
public function handle(Request $request, Closure $next): Response
{
if (!IpAccess::isAdmin($request->ip())) {
if ($request->expectsJson() || $request->is('api/*')) {
return response()->json([
'success' => false,
'message' => '无权限访问',
], 403);
}
abort(403);
}
return $next($request);
}
}