ith5 6 місяців тому
батько
коміт
b3f8404165

+ 1 - 1
app/v1/middleware/FilterPermission.php

@@ -39,7 +39,7 @@ class FilterPermission implements MiddlewareInterface
             'auth_ad_permission' => $auth_ad_permission === '*' ? '' : $auth_ad_permission,
         ];
        
-       // 合并并设置回 request
+        // 合并并设置回 request
         if ($method === 'GET') {
             $request->setGet(array_merge($request->get(), $extraParams));
         } elseif ($method === 'POST') {

+ 12 - 0
plugin/saiadmin/app/middleware/CheckLogin.php

@@ -6,6 +6,7 @@
 // +----------------------------------------------------------------------
 namespace plugin\saiadmin\app\middleware;
 
+use plugin\saiadmin\app\cache\UserInfoCache;
 use ReflectionClass;
 use Webman\Http\Request;
 use Webman\Http\Response;
@@ -26,8 +27,19 @@ class CheckLogin implements MiddlewareInterface
 
         // 访问的方法需要登录
         if (!in_array($request->action, $noNeedLogin)) {
+            
             try {
                 $token = JwtToken::getExtend();
+               // 根据用户id获取用户权限
+                $userAuthCache = new UserInfoCache($token['id']);
+                
+           
+                 $user_info = $userAuthCache->getUserInfo();
+                if($user_info['status']===0){
+                    throw new ApiException('您的账号已禁用,请联系管理员', 401);
+                }
+
+                $request->setHeader('user_info', $user_info);
                 $request->setHeader('check_login', true);
                 $request->setHeader('check_admin', $token);
             } catch (\Throwable $e) {