基本的laravel路由密码保护而不设置数据库?

2022-01-08 00:00:00 php laravel laravel-4 basic-authentication

我正在为域 (example.com/demo) 寻找一个死的简单密码保护解决方案(用户名和密码存储为数组中的键值对).我知道这在生产中是不好的做法，但这只是对某人的快速演示.我目前拥有的代码非常简单:

I'm looking for a dead simple password protection solution (username and password stored as key-value pair in array) to a domain (example.com/demo). I know this is bad practice in production but this is just a quick demo to someone. The code I have currently is pretty trivial stuff:

Route::group(['prefix' => 'demo', 'before' => 'auth.basic'], function() {...});

我必须创建自己的过滤器吗?我将如何设置它以使过滤器仅在生产中有效?

Would I have to create my own filter? How would I set it so the filter only works in production?

推荐答案

这很简单:

Route::filter('auth.verybasic', function()
{
    if(Request::getUser() != 'foo' || Request::getPassword() != 'bar'){
        $headers = array('WWW-Authenticate' => 'Basic');
        return Response::make('Invalid credentials.', 401, $headers);
    }
});

关于环境限制，只需检查 App::environment():

Regarding the environment restriction, just check with App::environment():

Route::filter('auth.verybasic', function()
{
    if(App::environment() != 'production') return;
    // check login (same as above)
});

相关文章