中间件有:1、Authenticate;2、CheckForMaintenanceMode;3、EncryptCookies;4、RedirectIfAuthenticated;5、TrimStrings;6、TrustProxies等等。
本教程操作环境:windows7系统、Laravel6版、Dell G3电脑。
Laravel自带的中间件
Laravel 自带了一些中间件,包括身份验证、CSRF 保护等。Laravel 具体启用了哪些中间件,可通过 appHttpKernel.php 文件查看。对于以 AppHttpMiddleware 开头的中间件(位于 app/Http/Middleware 目录)是我们可以对其行为进行定制的中间件。
Authenticate 中间件
源文件:appHttpMiddlewareHttpMiddlewareAuthenticate.php
<?php namespace AppHttpMiddleware; use IlluminateAuthMiddlewareAuthenticate as Middleware; class Authenticate extends Middleware { /** * Get the path the user should be redirected to when they are not authenticated. * * @param IlluminateHttpRequest $request * @return string */ protected function redirectTo($request) { if (! $request->expectsJson()) { return route('login'); } } }
作用:
用户身份验证。可修改 redirectTo 方法,返回未经身份验证的用户应该重定向到的路径。
CheckForMaintenanceMode 中间件
源文件 :appHttpMiddlewareCheckForMaintenanceMode.php
<?php namespace AppHttpMiddleware; use IlluminateFoundationHttpMiddlewareCheckForMaintenanceMode as Middleware; class CheckForMaintenanceMode extends Middleware { /** * The URIs that should be reachable while maintenance mode is enabled. * * @var array */ protected $except = [ // ]; }
作用:
检测项目是否处于 维护模式。可通过 $except 数组属性设置在维护模式下仍能访问的网址。
EncryptCookies 中间件
源文件:appHttpMiddlewareEncryptCookies.php
<?php namespace AppHttpMiddleware; use IlluminateCookieMiddlewareEncryptCookies as Middleware; class EncryptCookies extends Middleware { /** * The names of the cookies that should not be encrypted. * * @var array */ protected $except = [ // ]; }
作用
对 Cookie 进行加解密处理与验证。可通过 $except 数组属性设置不做加密处理的 cookie。
RedirectIfAuthenticated 中间件
源文件:appHttpMiddlewareRedirectIfAuthenticated.php
<?php namespace AppHttpMiddleware; use Closure; use IlluminateSupportFacadesAuth; class RedirectIfAuthenticated { /** * Handle an incoming request. * * @param IlluminateHttpRequest $request * @param Closure $next * @param string|null $guard * @return mixed */ public function handle($request, Closure $next, $guard = null) { if (Auth::guard($guard)->check()) { return redirect('/home'); } return $next($request); } }
作用:
当请求页是 注册、登录、忘记密码 时,检测用户是否已经登录,如果已经登录,那么就重定向到首页,如果没有就打开相应界面。可以在 handle 方法中定制重定向到的路径。
TrimStrings 中间件
源文件:appHttpMiddlewareTrimStrings.php
<?php namespace AppHttpMiddleware; use IlluminateFoundationHttpMiddlewareTrimStrings as Middleware; class TrimStrings extends Middleware { /** * The names of the attributes that should not be trimmed. * * @var array */ protected $except = [ 'password', 'password_confirmation', ]; }
作用:
对请求参数内容进行 前后空白字符清理。可通过 $except 数组属性设置不做处理的参数。
TrustProxies 中间件
源文件:appHttpMiddlewareTrustProxies.php
<?php namespace AppHttpMiddleware; use IlluminateHttpRequest; use FideloperProxyTrustProxies as Middleware; class TrustProxies extends Middleware { /** * The trusted proxies for this application. * * @var array|string */ protected $proxies; /** * The headers that should be used to detect proxies. * * @var int */ protected $headers = Request::HEADER_X_FORWARDED_ALL; }
作用:
配置可信代理。可通过 $proxies 属性设置可信代理列表,$headers 属性设置用来检测代理的 HTTP 头字段。
VerifyCsrfToken 中间件
源文件:appHttpMiddlewareVerifyCsrfToken.php
<?php namespace AppHttpMiddleware; use IlluminateFoundationHttpMiddlewareVerifyCsrfToken as Middleware; class VerifyCsrfToken extends Middleware { /** * Indicates whether the XSRF-TOKEN cookie should be set on the response. * * @var bool */ protected $addHttpCookie = true; /** * The URIs that should be excluded from CSRF verification. * * @var array */ protected $except = [ // ]; }
作用:
验证请求里的令牌是否与存储在会话中令牌匹配。可通过 $except 数组属性设置不做 CSRF 验证的网址。