first commit

app/admin/middleware/Auth.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace app\admin\middleware;
+
+use thans\jwt\facade\JWTAuth;
+use thans\jwt\exception\TokenExpiredException;
+
+class Auth
+{
+    public function handle($request, \Closure $next)
+    {
+        try {
+            // 1. 核心：必须先执行 auth()，它会自动从 Header 读取 Bearer Token 并验证
+            // 如果过期或非法，这里会直接抛出异常
+
+            $payload = JWTAuth::auth();
+            // $payload = JWTAuth::getPayload();             这个是获取数据，进行解码token
+            $request->login_user_id  = (int)$payload['user_id'] ?? null;
+            $request->login_role     = $payload['role'] ?? null;
+
+            return $next($request);
+        }catch (TokenExpiredException $e){
+            // 捕获token过期异常
+            return json(['code' => 401, 'msg' => '登录已过期，请重新登录'],401);
+
+        } catch (\Exception $e) {
+            // 如果报错，返回具体的错误信息，方便我们排查
+            return json(['code' => 400, 'msg' => '权限校验失败：' . $e->getMessage()], 400);
+        }
+    }
+}