基于多个用户角色的路由级别的中间件

Question

I have about 10 type of users role in laravel application, where e.g.

  user_type_1 and user_type 4 are accessing url-1.
  user_type_7, user_type_5 and user_type 4 are accessing url-2.
  user_type_5, user_type_1, user_type_3 and user_type 6 are accessing url-3.
  ............................................
  ............................................
   n number of combination of routes. url according to user type.

My route/web.php file have about 1500 routes and currently not seperated as group using middleware. I have to restrict user for only urls that is authorized for that kind of user_type. Can you please suggest any better approach for doing this.

I had tried with making combination of url with middleware group like below, but after few work left this approach.

Route::group(['middleware' => ['middleware_user_type_1', 'middleware_user_type_2']], function () {
        Route::get('url-1', 'XYZController@someMethod');
    });

In this way request first goes to first middleware in array and if not valid user type then not try with second middleware.

Answer 1

You need to implement one middleware and pass user types to it.

Route::group(['middleware' => ['check_user_type:type_1,type_2']], function () {
        Route::get('url-1', 'XYZController@someMethod');
    });

Take a look how similar logic implemented in spatie/laravel-permission role middleware.

Route::group(['middleware' => ['role:super-admin|writer']], function () {
    //
});

Middleware then explodes roles string by the separator, and then check if the current user has any of the roles.