流明授权 - 在数组上调用成员函数parameter（）

Question

Trying to authorize a user to update a post if the user id and the post user_id matches. I have a custom callback for authorization in the AuthServiceProvider which checks for 'Authorization' header, which is an API key in the boot() function.

$this->app['auth']->viaRequest('api', function ($request) {
            if($request->header('Authorization')) {
                $user = $this->getUserFromAuthorizationHeader($request);

                if (!empty($user)) {
                    $request->request->add(['userid' => $user->id]);
                }

                return $user;
            }
        });

The function getUserFromAuthorizationHeader gets a Request $request parameter and extracts the Authorization header, which is an api key, and then returns a User object.

I defined a gate update-post which checks the user that is returned from the callback and the post passed when calling the gate update-post from a controller.

Gate::define('update-post', function($user, $post){
            Log::info($user);
            return $user->id == $post->user_id;
        });

The way I am calling the Gate in my PostController is by the following

...
$user = $this->getUserFromRequest($request);
        if(Gate::denies('update-post', $post)) {
            return response("Unauthorized.", 401);
        }
...

I logged - using Log:: info() - the $user and $post variables in my Gate and I can successfully see the correct user and post objects being passed, but I get the error Call to a member function parameter() on array and I can't understand why exactly I am getting it.

Answer 1

You probably need to convert into collection before comparing if you are getting the array like this

$post = collect($post);
$user = collect($user);
Gate::define('update-post', function($user, $post){
            Log::info($user);
            return $user->id == $post->user_id;
        });

Doc Reference