改进 拿的 Token 具有全部权限

This commit is contained in:
iVampireSP.com 2023-02-18 17:39:31 +08:00
parent 777e028aea
commit 3f3d6efe61
No known key found for this signature in database
GPG Key ID: 2F7B001CA27A8132
2 changed files with 11 additions and 20 deletions

View File

@ -6,15 +6,14 @@
use App\Http\Controllers\Controller;
use App\Notifications\User\UserNotification;
use App\Rules\Domain;
use function back;
use function config;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Carbon;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Cache;
use Illuminate\View\View;
use function back;
use function config;
use function redirect;
use function session;
use function view;
@ -85,18 +84,10 @@ public function newToken(Request $request): RedirectResponse
{
$request->validate([
'name' => 'required|string|max:255',
'domain' => ['nullable', 'string', 'max:255', new Domain],
]);
$abilities = [];
if ($request->has('domain')) {
$abilities = ['domain-access:'.$request->input('domain')];
}
$token = $request->user()->createToken(
$request->input('name'),
$abilities
);
return back()->with('token', $token->plainTextToken);

View File

@ -20,7 +20,7 @@
@php
session()->forget('callback');
session()->forget('referer.domain');
// session()->forget('referer.domain');
@endphp
<script>
@ -40,9 +40,9 @@
<input type="hidden" name="name" placeholder="Token 名字"
value="自动登录 - {{ date('Y-m-d H:i:s') }}"/>
@if($referer_host)
<input type="hidden" name="domain" value="{{ $referer_host }}"/>
@endif
{{-- @if($referer_host)--}}
{{-- <input type="hidden" name="domain" value="{{ $referer_host }}"/>--}}
{{-- @endif--}}
<button type="submit" class="btn btn-primary">授权</button>