Linux中ThinkPHP的权限管理

CREATE TABLE `users` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `username` varchar(50) NOT NULL,
  `password` varchar(255) NOT NULL,
  PRIMARY KEY (`id`)
);

CREATE TABLE `roles` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `name` varchar(50) NOT NULL,
  PRIMARY KEY (`id`)
);

CREATE TABLE `permissions` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `name` varchar(50) NOT NULL,
  PRIMARY KEY (`id`)
);

CREATE TABLE `user_roles` (
  `user_id` int(11) NOT NULL,
  `role_id` int(11) NOT NULL,
  PRIMARY KEY (`user_id`, `role_id`)
);

CREATE TABLE `role_permissions` (
  `role_id` int(11) NOT NULL,
  `permission_id` int(11) NOT NULL,
  PRIMARY KEY (`role_id`, `permission_id`)
);

// application\model\User.php
namespace app\model;

use think\Model;

class User extends Model
{
    // 用户模型
}

// application\model\Role.php
namespace app\model;

use think\Model;

class Role extends Model
{
    // 角色模型
}

// application\model\Permission.php
namespace app\model;

use think\Model;

class Permission extends Model
{
    // 权限模型
}

// application\middleware\Auth.php
namespace app\middleware;

use think\Request;
use think\facade\Session;

class Auth
{
    public function handle(Request $request, \Closure $next)
    {
        if (!Session::has('user_id')) {
            return redirect('/login');
        }

        $userId = Session::get('user_id');
        $user = new \app\model\User();
        $user->where('id', $userId)->find();

        if (!$user) {
            Session::delete('user_id');
            return redirect('/login');
        }

        $request->user = $user;
        return $next($request);
    }
}

// application\controller\Index.php
namespace app\controller;

use think\Controller;
use app\model\User;
use app\model\Role;
use app\model\Permission;

class Index extends Controller
{
    public function index()
    {
        $user = $this->request->user;
        return json($user);
    }

    public function login()
    {
        $username = $this->request->param('username');
        $password = $this->request->param('password');

        $user = new User();
        $user->where('username', $username)->find();

        if ($user && password_verify($password, $user->password)) {
            Session::set('user_id', $user->id);
            return json(['status' => 'success', 'message' => '登录成功']);
        } else {
            return json(['status' => 'error', 'message' => '用户名或密码错误']);
        }
    }

    public function logout()
    {
        Session::delete('user_id');
        return json(['status' => 'success', 'message' => '退出登录成功']);
    }
}

// application\route.php
use think\Route;

Route::get('/', 'index/Index/index');
Route::post('/login', 'index/Index/login');
Route::post('/logout', 'index/Index/logout');