Karlcarlo
c9a98f342c
添加大量图片、字体、音频等静态资源文件，包括用户界面图片、模板文件和安装界面素材 添加系统版本配置文件(.version)和常量定义文件(.constant) 更新供应商依赖文件，包括Symfony VarDumper组件和相关许可证文件 添加验证码配置文件(captcha.php)和.gitignore规则
39 lines
1.9 KiB
PHP
39 lines
1.9 KiB
PHP
<?php
|
||
// +----------------------------------------------------------------------
|
||
// | CRMEB [ CRMEB赋能开发者，助力企业发展 ]
|
||
// +----------------------------------------------------------------------
|
||
// | Copyright (c) 2016~2026 https://www.crmeb.com All rights reserved.
|
||
// +----------------------------------------------------------------------
|
||
// | Licensed CRMEB并不是自由软件，未经许可不能去掉CRMEB相关版权
|
||
// +----------------------------------------------------------------------
|
||
// | Author: CRMEB Team <admin@crmeb.com>
|
||
// +----------------------------------------------------------------------
|
||
namespace app\http\middleware\api;
|
||
|
||
use app\services\message\service\StoreServiceServices;
|
||
use app\services\store\DeliveryServiceServices;
|
||
use app\services\store\SystemStoreStaffServices;
|
||
use crmeb\interfaces\MiddlewareInterface;
|
||
use app\Request;
|
||
|
||
class CustomerMiddleware implements MiddlewareInterface
|
||
{
|
||
|
||
public function handle(Request $request, \Closure $next)
|
||
{
|
||
$uid = (int)$request->uid();
|
||
/** @var StoreServiceServices $services */
|
||
$services = app()->make(StoreServiceServices::class);
|
||
/** @var SystemStoreStaffServices $storeServices */
|
||
$storeServices = app()->make(SystemStoreStaffServices::class);
|
||
$rule = trim(strtolower($request->rule()->getRule()));
|
||
/** @var DeliveryServiceServices $deliveryService */
|
||
$deliveryService = app()->make(DeliveryServiceServices::class);
|
||
$isDelivery = $deliveryService->checkoutIsService($uid);
|
||
$withRule = ['/api/order/order_verific', "/api/admin/order/detail/<orderId>"];
|
||
if (((!$services->checkoutIsService(['uid' => $uid, 'account_status' => 1, 'customer' => 1]) && !$storeServices->verifyStatus($uid)) && !$isDelivery) && !(in_array($rule, $withRule)))
|
||
return app('json')->fail('权限不足');
|
||
return $next($request);
|
||
}
|
||
}
|