<?php declare(strict_types=1); namespace App\Http\Middleware; use Closure; use Illuminate\Http\Request; use Illuminate\Support\Facades\Auth; use Symfony\Component\HttpFoundation\Response; final class Coach { /** * 处理传入的请求 */ public function handle(Request $request, Closure $next): Response { // 验证用户是否为技师 $user = Auth::user(); abort_if(! $user, Response::HTTP_UNAUTHORIZED, '用户未登录'); abort_if(! $user->coach, Response::HTTP_FORBIDDEN, '非技师用户无权访问'); return $next($request); } }