Slim 是一个PHP微框架，可帮助您快速编写简单但功能强大的Web应用程序和API。
Casbin 可用作 Slim fr
认证
先认证，后授权。
这里我们使用 HTTP Basic Authentication(https://en.wikipedia.org/wiki/Basic_access_authentication).
slim-basic-auth(https://github.com/tuupola/slim-basic-auth) 提供了 PSR-7 和 PSR-15 基本身份验证中间件，您可以使用composer进行安装: `composer require tuupola/slim-basic-auth`。
$app->add(new HttpBasicAuthentication([
'users' => [
'root' => 't00r',
'somebody' => 'passw0rd',
],
'before' => function ($request, $arguments) {
return $request->withAttribute('user', $arguments['user']);
},
]));Casbin 授权中间件本示例实现了授权中间件。
它首先获取当前已认证的`user`，当前请求的`uri`和`method`，然后使用`Casbin` 去权限决策。
namespace App\Middleware;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Server\RequestHandlerInterface as RequestHandler;
use Slim\Psr7\Response;
use Casbin\Enforcer;
class Authorization
{
/**
* Authorization middleware invokable class.
*
* @param ServerRequest $request PSR-7 request
* @param RequestHandler $handler PSR-15 request handler
*
* @return Response
*/
public function __invoke(Request $request, RequestHandler $handler): Response
{
$e = new Enforcer('config/rbac_model.conf', 'config/policy.csv');
$user = $request->getAttribute('user');
$uri = $request->getUri();
$action = $request->getMethod();
if ($user && !$e->enforce($user, $uri->getPath(), $action)) {
$response = new Response();
$response->withStatus(403)->getBody()->write('Unauthorized.');
return $response;
}
$response = $handler->handle($request);
return $response;
}
}Model文件`config/rbac_model.conf` 内容如下：[request_definition]
r = sub, obj, act
[policy_definition]
p = sub, obj, act
[role_definition]
g = _, _
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = g(r.sub, p.sub) && keyMatch2(r.obj, p.obj) && r.act == p.act策略文件`config/policy.csv`内容如下：p, root, /, GET
p, root, /users, GET
p, root, /users/:id, GET创建路由$app->get('/', function (Request $request, Response $response) {
$response->getBody()->write('Hello Casbin !');
return $response;
});
$app->group('/users', function (Group $group) {
$group->get('', ListUsersAction::class);
$group->get('/{id}', ViewUserAction::class);
});Casbin 骨架应用完整的代码 : [Casbin skeleton application with Slim fr
它让使用 Slim fr
最佳答案
