Laravel 中间件在 laravel 5.4 中不起作用答案

【问题标题】：Laravel Middleware not working in laravel 5.4Laravel 中间件在 laravel 5.4 中不起作用
【发布时间】：2017-06-03 07:04:29
【问题描述】：

我有以下代码

<?php

namespace App\Http\Middleware;

use Closure;
use Session;

class CheckLogin
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if(!Session::has('userAuthDetail')){
            // return redirect('login');
            // return redirect()->guest('/login');
        } else {
            return $next($request);     
        }
    }
}

在 web.php 中

Route::get('/login', ['as' => 'login', 'uses' => 'Auth\LoginController@login']);

Route::group(['middleware' => ['login']], function () {
    Route::post('/add','MyController@submitData');
});

登录控制器

public function postLogin(Request $request) {
     //    print_r($request->all());

     $data['email']=$request->email;
     $data['password']=$request->password;
     $response=  ApiModel::userLogin($data);
     if($response->msg=='success'){
         session(['userAuthDetail' => $response->data[0]]);
         return redirect('/');
    } else if($response->msg=='failed'){
         return redirect('/');
    }   
}

如果我在中间件中添加 if else 条件则网站抛出错误

VerifyCsrfToken.php 第 156 行中的 ErrorException：尝试获取属性非对象的

如果我删除 if else 并仅添加

public function handle($request, Closure $next)
{
   if(!Session::has('userAuthDetail')){

   } 
   return $next($request);      
}

然后工作正常，但如果凭据失败则重定向到仪表板。

注意：我无法使用 laravel auth，因为我正在与用核心 php 编写的 api 进行通信

更新；

kernal.php

<?php

namespace App\Http;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel
{
    /**
     * The application's global HTTP middleware stack.
     *
     * These middleware are run during every request to your application.
     *
     * @var array
     */
    protected $middleware = [
        \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
        \App\Http\Middleware\TrimStrings::class,
        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
    ];

    /**
     * The application's route middleware groups.
     *
     * @var array
     */
    protected $middlewareGroups = [
        'web' => [
            \App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            // \Illuminate\Session\Middleware\AuthenticateSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
        \App\Http\Middleware\CheckLogin::class,
        ],

        'api' => [
            'throttle:60,1',
            'bindings',
        ],
    ];

    /**
     * The application's route middleware.
     *
     * These middleware may be assigned to groups or used individually.
     *
     * @var array
     */
    protected $routeMiddleware = [
        'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'login' => \App\Http\Middleware\CheckLogin::class,
    ];
}

【问题讨论】：

你在中间件中定义了poslogin函数路由吗？
@kunal .no 它在登录中间路线之外
你是怎么在Kernel.php文件中注册中间件的？
'login' => \App\Http\Middleware\CheckLogin::class，在路由中间件和中间件组web中
@OrkhanAlikhanov.updated 问题

标签： php laravel laravel-5 middleware

【解决方案1】：

如果用户会话未创建为，您应该返回登录页面

public function handle($request, Closure $next)
{
    if(!Session::has('userAuthDetail')){
         //return to login page
    } 
    return $next($request);//if session exist then forward the request     
}

【讨论】：

是的，我已经尝试过了，但是如果我添加了，那么网站页面没有响应

【解决方案2】：

Line 156 of VerifyCsrfToken.php 表明它尝试调用$response->headers->setCookie(...)。您的错误表明 $response 为空，这就是 if(!Session::has('userAuthDetail')) { ... } 场景中 CheckLogin 中间件中会发生的情况。

基本上，您有一个返回 null 的中间件（或者根本不返回任何内容，在 PHP 世界中这种类型被视为 null）。这是不允许的，中间件必须始终返回某种响应（或抛出异常）。

TL;DR：您的中间件必须为所有执行路径返回响应。

【讨论】：